Data Protection Notice of IQSIGHT B.V.
With the following data protection notice, we inform you about which categories of personal data (hereinafter referred to as ‘data’) we process, for what purposes and to what extent. The data protection notice applies to all processing of personal data carried out by us, both in the context of the provision of our services and on our websites, in mobile applications and within external online presences, such as our social media profiles (hereinafter collectively referred to as ‘online offers’).
1. IQSIGHT B.V. respects your privacy
The protection of your privacy in the processing of personal data as well as the security of all business data is an important concern for us. We process personal data collected during your visit to our online offers confidentially and only in accordance with the legal provisions.
Data protection and information security are anchored in our corporate policy.
2. Controller (Art. 24 UK-GDPR)
The controller for data processing, i.e. the legal person which decides on the purposes and means of data processing in accordance with Art. 24 UK-GDPR, is:
IQSIGHT B.V.Achtseweg Zuid 1735651 GW EindhovenThe NetherlandsEmail: Dataprotection.Keenfinity@keenfinity-group.comPhone: +31 (0)40 25 77 202
3. Collection, processing and usage of personal data
3.1. Categories of processed data
The following categories of data are processed:
3.2. Principles
Personal data consists of any information relating to an identified or identifiable natural person; This includes, for example, names, addresses, telephone numbers, email addresses, main contract data, contract accounting and payment data, all of which are expressions of an individual's identity.
We process personal data (including IP addresses) only to comply with a legal obligation or if you have given us your consent to process personal data in this context, e.g. by registering.
3.3. Processing purposes and legal bases
We, as well as the service providers commissioned by us, process your personal data for the following processing purposes:
3.4. Registration
If you would like to use our Offerings or access the benefits of our Offerings, we may ask you to register. When you register, we collect the personal data necessary for the performance of the contract (e.g. first name, last name, e-mail address, information on the preferred payment method or account holder, if applicable) as well as other data on a voluntary basis. Mandatory information is marked with a *.
3.5. Log Files
Every time you use the Internet, your browser transmits certain information that we store in so-called log files.
We retain log files for 7 days to detect performance issues and for security reasons (e.g., to investigate attempted attacks) and then delete them. Log files that must be retained for evidentiary purposes are exempt from deletion until the respective incident has been clarified and can be passed on to the investigating authorities on a case-by-case basis.
Log files are also used for analysis purposes (without the IP address or without the full IP address). See also the web analysis module.
In particular, the following information is stored in the log files:
3.6. Children
This online offer is not intended for children under the age of 16.
3.7. Disclosure of data
3.7.1. Data transfer to other data controllers
In principle, your personal data will only be passed on to other controllers if this is necessary for the performance of a contract between us and you, if we ourselves or a third party have a legitimate interest in the data transfer or if you have given your consent. For details on the legal bases, see Section 3.3.
In addition, data may be transferred to other data controllers if we are required to do so by law or enforceable governmental or court orders.
3.7.2. Service providers (general)
As part of our processing of personal data, it may be transmitted to or disclosed to other bodies, companies, legally independent organisational units or persons. The recipients of this data may include, for example, service providers commissioned with IT tasks, providers of services and content that are integrated into a website, sales and marketing services, contract management, payment processing, programming, data hosting and hotline services. We have carefully selected these service providers and regularly monitor them, in particular with regard to the careful handling of the data they store and their protection. In these cases, we observe the legal requirements and, in particular, conclude appropriate contracts or agreements with the recipients of your data that serve to protect your data.
Data transfers within the group of companies: We may transfer personal data to other companies in our group of companies or provide them with access to this data. If this transfer is for administrative purposes, the transfer of the data is based on our legitimate business and commercial interests or if it is necessary for the performance of our contractual obligations or if there is the consent of the data subjects or a legal permission.
3.7.3. Payment service providers
We use third-party payment service providers.
Depending on the payment method you choose during the order process, we will pass on the data required for payment processing (e.g. bank details or credit card details) to the bank commissioned with the payment or to payment service providers commissioned by us. Sometimes, payment service providers also collect and process such data as data controllers. In this case (payment service providers are data controllers), the data protection notices or the data protection regulations of the respective payment service provider apply.
3.7.4. Receivables management
We reserve the right to have receivables collected by external service providers.
In addition, we have a legitimate interest in selling receivables to third parties and transmitting the data required for the collection of the receivables to the respective receivables purchaser. When collecting receivables, the receivables purchasers act in their own name and are responsible for the processing of the data themselves. In this respect, the data protection information of the respective receivables purchaser applies.
3.8. Disclosure to recipients outside the EEA
We may transfer personal data to recipients outside the EEA in so-called third countries.
In these cases, we ensure before the transfer that either the data recipient offers an adequate level of data protection (e.g. due to an adequacy decision of the European Commission for the respective country or due to the agreement of so-called EU model clauses with the recipient) or that you have consented to the transfer.
International data transfers
Data processing in third countries: If we transfer data to a third country (i.e. outside the United Kingdom or if this happens in the context of the use of third-party services or the disclosure or transmission of data to other persons, bodies or companies (recognisable, for example, by the postal address of the respective providers or if the data protection declaration expressly refers to the transfer of data to third countries), this is always done in accordance with the legal requirements.
For data transfers to the USA, we primarily rely on the UK-Extension to the European Commission's adequacy decision of 10 July 2023 (‘EU-US Data Privacy Framework’) (hereinafter referred to as ‘DPF’). In addition, where possible, we have concluded the UK Addendum to the Standard Contractual Clauses with the respective providers that comply with the requirements of the EU Commission and set out contractual obligations to protect your data.
This double protection ensures comprehensive protection of your data: the UK-General Data Protection Regulation (UK- GDPR) is the primary layer of protection, while the standard contractual clauses serve as additional security. Should there be changes to the DPF, the UK Addendum to the Standard Contractual Clauses serves as a reliable fallback option. In this way, we ensure that your data is always adequately protected even in the event of any political or legal changes.
For the individual service providers, we will inform you whether they are certified according to DPF and whether Standard Contractual Clauses are in place. For more information on the DPF and a list of certified companies, please visit the U.S. Department of Commerce's website at https://www.dataprivacyframework.gov/.
Appropriate security measures apply to data transfers to other third countries, in particular standard contractual clauses, explicit consents or transfers required by law. Information on third-country transfers and applicable adequacy decisions can be found in the Information Comissioner’s Office (ICO) information: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/international-transfers/international-data-transfer-agreement-and-guidance/. .
3.9. Duration of storage; Retention periods
We generally store your data for as long as it is necessary for the provision of our online offer and the associated services or we have a legitimate interest in storing the data (e.g. we may still have a legitimate interest in postal marketing when performing a contract between us and you). In all other cases, we will delete your personal data, unless it is data that we are required to keep in order to comply with legal or contractual obligations (e.g. we are required to retain documents such as contracts and invoices for 10 years due to retention periods under German tax and commercial law).
4. Credit checks
As part of our business relationships, we carry out credit checks to mitigate economic risks and protect our corporate interests. For this purpose, we collect and process company data from business partners, in particular publicly available information such as excerpts from the commercial register, annual reports, Creditreform information and information from credit reference agencies. Data processing is carried out on the basis of Art. 6 (1)(f) UK-GDPR to protect our legitimate interests. The data collected is used exclusively for the assessment of economic performance and creditworthiness and is not passed on for other purposes.
If the result of a credit check does not meet our requirements, we reserve the right to request a secure payment method (e.g. credit card) or to refuse to conclude the contract.
The credit check includes automated decision-making in accordance with Art. 22 UK-GDPR. This automated assessment assesses your company's creditworthiness based on predefined algorithmic criteria. You have the right to object to this automated decision, to involve a case worker, to express your point of view and to challenge the decision. In such cases, please contact our data protection officer.
The data is stored for the duration of the business relationship plus the statutory retention periods.
5. Reports to credit agencies
We report due receivables to credit agencies if no payment has been made despite the due date, if the transmission is necessary to protect our legitimate interests or the legitimate interests of third parties and if the other legal requirements are met. These are
6. Use of cookies
Cookies and tracking mechanisms may be used as part of our online service. Cookies are small text files that may be stored on your device when you visit our online service. Tracking is possible with various technologies. In particular, we process information with the help of pixel technology and/or log file analysis.
6.1. Categories
We distinguish between cookies that are strictly necessary for the technical functions of the Online Service and those cookies and tracking mechanisms that are not absolutely necessary for the technical functioning of the Online Service. In principle, the use of the online service is also possible without cookies, which serve non-technical purposes.
Technically necessary cookies
By technically necessary cookies, we mean cookies, without which the technical provision of the online service cannot be guaranteed. These include, for example, cookies that store data to ensure smooth playback of video or audio material. These cookies are deleted when you leave the website.
Technically unnecessary cookies and tracking mechanisms
We only use such cookies and tracking mechanisms if you have given us your consent in advance. The exception to this is the cookie that stores the status of your privacy settings (selection cookie). The use of this cookie is based on our overriding legitimate interest in accordance with Art. 6 (1)(f) UK-GDPR. Convenience cookies are not currently used.
Marketing cookies and tracking mechanisms:
Through the use of marketing cookies and tracking mechanisms, we and our partners are able to provide you with offers based on your interests and resulting from an analysis of your user behaviour:
Statistics: With the help of statistical tools, we measure, for example, the number of page views you receive.
Conversion tracking: Our conversion tracking partners place a cookie on your computer (‘conversion cookie’) when you have come to our website via an ad from the respective partner. Usually, these cookies are no longer valid after 30 days. If you visit certain pages of our website and the cookie has not yet expired, we and the relevant conversion partner can recognise that a particular user has clicked on the advertisement and has been redirected to our website as a result. This can also be done across multiple devices. The information obtained with the help of the conversion cookie is used to compile conversion statistics and to record the total number of users who clicked on the respective ad and were redirected to a website with a conversion tracking tag.
Retargeting: These tools create user profiles using third-party advertising cookies or third-party advertising cookies, known as ‘web beacons’ (invisible graphics, also known as pixels or web beacons), or similar technologies. These are used for interest-based advertising and to check the frequency with which the user watches certain advertisements. The respective provider is the data controller for the processing of the data in connection with the tool. The providers of the tools may also share information with third parties for the purposes mentioned above. In this context, please note the data protection information of the respective provider.
We use the following tools for this purpose:
Please note that when using the tools, your data may be transferred to recipients outside the United Kingdom where there is no adequate level of data protection in accordance with the UK-GDPR. For more details, see the description of each marketing tool below.
6.2 Overview of the marketing tools and cookies we use
In this section you will find an overview of the marketing tools and cookies we use.
6.3. Management of cookies and tracking mechanisms
You can manage your settings for cookies and tracking mechanisms in the browser and/or in our privacy settings.
Note: The settings you make only apply to the browser you are using.
Disabling all cookies
If you wish to disable all cookies, please disable cookies in your browser settings. Please note that this may affect the functionality of the website.
Managing your preferences regarding non-technical cookies and tracking mechanisms
When you visit our website, you will be asked in a cookie layer whether you agree to the use of cookies or tracking mechanisms that are not technically necessary.
In our privacy settings, you can revoke your consent with effect for the future or give your consent at a later date.
6.4. Use of a consent management platform
On our website, we use the consent management application of a consent manager provider to obtain your consent to the storage of certain cookies on your device and to document them in compliance with data protection regulations. The provider of this technology is Consentmanager GmbH, Eppendorfer Weg 183, 20253 Hamburg, Germany – a company of Consentmanager AB, Håltegelvägen 1b, 72348 Västerås, Sweden (hereinafter referred to as the ‘Consent Manager Provider’).
When you visit our website, a connection is made to the servers of the Consent Manager provider in order to obtain your consents and other explanations regarding the use of cookies. The Consent Manager provider then stores a cookie in your browser in order to be able to assign or revoke your consent. The data collected in this way will be stored until you ask us to delete it, delete the cookie of the Consent Manager provider yourself or the purpose for which the data is stored no longer applies. Mandatory statutory retention obligations remain unaffected. We use the services of the consent manager provider to obtain the consent required by law in accordance with Art. 6 (1)(a) UK-GDPR for the use of cookies. The legal basis for the use of the consent management application is our legitimate interest in accordance with Art. 6 (1) (c) UK-GDPR. For more information on data protection at Consent Manager, please refer to Consentmanager's privacy policy: https://www.consentmanager.net/de/datenschutz/.
7. Use of our mobile applications
In addition to our online offerings, we offer mobile applications (‘apps’) for iOS and Android devices that enable extended use of our service. When using our apps, we collect certain personal data, in particular device information, usage statistics and technical data for functional optimization. Data processing is carried out on the basis of Art. 6 (1)(b) and (f) UK-GDPR for the performance of a contract and to protect our legitimate interests. We take technical and organizational measures in accordance with Art. 32 UK-GDPR to protect your data from unauthorized access. The permissions used in the apps are limited to the minimum necessary for functionality. The data will only be passed on to third parties within the framework of the legal regulations and only to the extent necessary for the provision of services.
7.1. Data Processing by App Store Operators
Please note that the operators of the app stores (Apple App Store, Google Play Store) process personal data independently and under their own responsibility. This includes information collected when you download, purchase, and install apps, as well as when you manage App Store accounts. Data processing by App Store operators is subject to their respective privacy policies and terms of use. We have no influence on the data collection and processing by these platforms. We encourage you to review the privacy policies of Apple Inc. and Google LLC to understand how these vendors handle your personal information. The operators of the app stores are responsible for compliance with the data protection regulations in their respective data processing.
8. Social Media Presences
We maintain social media presences and process user data in order to communicate with users or provide information about us.
We would like to point out that user data may be processed outside the European Union (EU) or the European Economic Area (EEA). This can result in risks for users, such as making it more difficult to enforce their rights.
In addition, user data within social networks is usually processed for market research and advertising purposes. For example, usage profiles can be created based on the user behaviour and the resulting interests of the users. The latter, in turn, can be used to place ads inside and outside social networks, for example, that presumably correspond to the interests of the users. As a rule, cookies are stored on the users' computers in which the user's behaviour and interests are stored. In addition, data may also be stored in the user profiles regardless of the devices used by the users (in particular if they are members of the respective platforms and are logged in there).
For a detailed description of the respective forms of processing and the options for objection (opt-out), we refer to the data protection information and information provided by the operators of the respective social networks.
In the case of requests for information and the exercise of the rights of data subjects, we also point out that these can be exercised most effectively with the providers. Only they have access to the user's data and can directly take appropriate measures and provide information. If you still need help, you can contact us.
LinkedIn
Social Network – We are jointly responsible with LinkedIn Ireland Unlimited Company for the collection (but not further processing) of visitor data, which is used to compile the ‘page insights’ (statistics) of our LinkedIn profiles. This data includes information about the types of content users view or interact with and the actions they take. It also collects information about the devices used, such as IP address, operating system, browser type, language settings and cookie data, as well as information from user profiles such as function, country, industry, hierarchical level, company size and employment status. For more information on LinkedIn's processing of user data, please refer to LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.
We have entered into a special agreement with LinkedIn Ireland (‘Page Insights Joint Controller Addendum’, https://legal.linkedin.com/pages-joint-controller-addendum), which specifically regulates the security measures that LinkedIn must observe and in which LinkedIn has agreed to comply with the rights of data subjects (i.e. users can, for example, submit requests for information or deletion directly to LinkedIn). The rights of users (in particular to information, deletion, objection and complaint to the competent supervisory authority) are not restricted by the agreements with LinkedIn. The joint responsibility is limited to the collection and transfer of data to LinkedIn Ireland Unlimited Company, a company based in the EU. LinkedIn Ireland Unlimited Company is solely responsible for the further processing of the data, in particular with regard to the transfer of data to the parent company LinkedIn Corporation in the USA; Provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; Legal basis: Legitimate interests (Art. 6 (1)(f) UK-GDPR); Website: https://www.linkedin.com; Privacy Policy: https://www.linkedin.com/legal/privacy-policy; Legal basis for third-country transfers: Data Privacy Framework (DPF); Standard Contractual Clauses (https://legal.linkedin.com/dpa); Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Plugins, Embedded Features, and Content
We integrate functional and content elements into our online offer that are obtained from the servers of their respective providers (hereinafter referred to as ‘third-party providers’). This can be, for example, graphics, videos or city maps (hereinafter referred to as ‘content’).
The integration always requires that the third-party providers of this content process the IP address of the users, since without the IP address they would not be able to send the content to their browser. The IP address is therefore required for the display of these contents or functions. We make every effort to only use content whose respective providers use the IP address only for the delivery of the content. Third-party service providers may also use pixel tags (invisible graphics, also known as ‘web beacons’) for statistical or marketing purposes. By using pixel tags, information such as visitor traffic on the pages of this website can be evaluated. The pseudonymised information may also be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information on the use of our online offer, but may also be linked to such information from other sources.
Information on legal bases: If we ask users for their consent to the use of the third-party providers, the legal basis for processing their data is consent. Otherwise, the users' data will be processed on the basis of our legitimate interests (i.e. interest in efficient, economical and recipient-friendly services). In this context, we would also like to draw your attention to the information on the use of cookies in this privacy policy.
Further information on the processing, processes and services:
9. Means of communication on social media presences
On our social media presences (e.g. LinkedIn, Facebook), we use communication tools to process your messages sent through this social media platform and to offer you support.
When you send a message through our social media presences, the message will be processed to process your request (and, if applicable, any additional data we receive from the social media provider in connection with that message, such as your name or files).
In addition, we may analyze the data in an aggregated and anonymized form to better understand how our social media platform is being used.
We will forward the personal information you provide (e.g., surname, first name, title, email address, if applicable) to the affiliated Keenfinity company responsible for processing your request (e.g. if your request relates to a product distributed by another affiliated Keenfinity company). The legal basis for the processing of your data is our legitimate interest (Art. 6 (1)(f) UK-GDPR) or, if applicable, an existing contractual relationship (Art. 6 (1)(b) UK-GDPR). The processed personal data will be deleted no later than 180 days after receipt of your message.
10. Newsletter
You can register for newsletters as part of our online offerings. We offer the so-called double opt-in option, i.e. we will only send you a newsletter by email if you have expressly confirmed the activation of the newsletter service by clicking on the link in a notification. If you no longer wish to receive the newsletter, you can unsubscribe at any time by withdrawing your consent. You can withdraw your consent to email newsletters by clicking on the link included in the relevant newsletter email. Alternatively, you can contact us using the contact details provided in the ‘Contact’ section. Please note that subscribing to the newsletter may involve a transfer of your data to recipients outside the United Kingdom where there is no adequate level of data protection under the UK-GDPR, as set out in 3.8 above.
We use the following tools:
Name: Optimizely Campaign Provider: Optimizely North America, Inc., 119 5th Ave 7th floor, New York, NY 10003, USA Conction: If you sign up for our newsletters from Keenfinity group affiliates, Optimizely North America, Inc. Your personal data (e-mail address, first and last name) on the basis of your consent in accordance with Art. 6 (1)(a) UK-GDPR. For more information on the processing of your personal data, please visit: https://www.optimizely.com/legal/privacy-notice/. Legal basis for third-country transfers: Data Privacy Framework (DPF).
Name: Constant Contact Email Marketing Provider: Constant Contract, Inc., 1601 Trapelo Road, Waltham, MA 02451, U.S.A. Conction: If you sign up for our newsletter from U.S.-based subsidiaries of the Keenfinity Group, Constant Contract, Inc. Your personal data (e-mail address, first and last name) on the basis of your consent in accordance with Art. 6 (1)(a) UK-GDPR. For more information on the processing of your personal data, please visit: https://www.constantcontact.com/legal/privacy-notice. GDPR Addendum: https://www.constantcontact.com/legal/gdpr-addendum. Legal basis for third-country transfers: Data Privacy Framework (DPF).
11. Forms
We offer various forms on our website, such as forms for contacting specialist departments (‘contact forms’), registration forms (e.g. for events), forms for requesting product and information material (e.g. e-guides and webinar recordings) (‘marketing forms’). The data collected differs and is visible in the respective form. Required fields in marketing forms, such as name, last name and email address, company affiliation, and country, are marked with an asterisk (*).
The legal basis for the processing of your data in contact forms is our legitimate interest in answering questions in accordance with Art. 6 (1)(f) UK-GDPR. Processing is considered complete when the matter in question has been resolved. The storage and use of the data transmitted by you serves exclusively to process your contact request or the recording of contacts and the associated administration. Legal retention obligations can prevent immediate deletion.
If you submit the mandatory field data in marketing forms, you agree to the use of your personal data in accordance with Art. 6 (1)(a) UK-GDPR. You can withdraw your consent at any time.
12. Use of the Keenfinity ID on our online offerings
Use of the Keenfinity ID service for central authentication on Keenfinity online offerings
Users of our online services have the option of authenticating themselves centrally for the use of our online services via our single sign-on (SSO) service Keenfinity ID. As part of the provision of the Keenfinity ID, we collect the personal data required for the provision of the Keenfinity ID (e-mail address and password) in accordance with Art. 6 (1)(b) UK-GDPR and record your consent to our contractual terms and conditions. Your acknowledgement of this Data Protection Notice with date and time.
As part of the termination of your Keenfinity ID user contract by clicking on the following link (‘Delete account’), you can also arrange for the deletion of your personal data via our HYPERLINK "https://www.keenfinity-group.com/xc/en/contact/" contact options.
In connection with the provision of the Keenfinity ID, personal data is exchanged with other companies in the Keenfinity Group. Against this background, your personal data may also be transferred to third countries outside the European Economic Area (EEA). To this end, we have taken appropriate security measures within the Keenfinity Group to ensure a high level of protection.
If you would like to use your Keenfinity ID to sign up for offers from other companies in the Keenfinity group (‘Service Providers’), you will do so in a login form provided by us. If you are actually registered for the Keenfinity ID with the data entered there, we will confirm your eligibility to the respective service provider and transmit your email address as well as the technical confirmation of the successful log-in, which they need in order to be able to provide you with the use of the specific service. This includes your name, address, and Keenfinity ID. Your password will not be transmitted to the respective service provider.
13. External links
Our online offers may contain links to third-party websites – from providers who are not affiliated with us. We have no control over the collection, processing and use of personal data that may be transmitted to the third party (such as the IP address or the URL of the page on which the link is located) when the link is clicked, as the behaviour of third parties is inherently beyond our control. We do not accept any responsibility for the processing of this personal data by third parties.
14. Security
Our employees and the companies that provide services on our behalf are bound by a duty of confidentiality and compliance with applicable data protection laws.
We take all necessary technical and organizational measures in accordance with Art. 32 UK-GDPR to ensure an appropriate level of security and to protect your data managed by us, in particular against the risks of accidental or unlawful destruction, manipulation, loss, alteration or unauthorized disclosure or access. Our security measures are continuously improved in line with technological progress.
15. Your rights
To assert your rights, please use the details provided in the ‘Contact’ section. Please make sure that it is possible to clearly identify yourself.
Right of access (Art. 15 UK-GDPR):You have the right to obtain confirmation from us as to whether or not your personal data is being processed and, if so, to obtain access to your personal data.
Right to rectification (Art. 16 UK-GDPR):You have the right to request the correction of inaccurate or completion of your personal data.
Right to erasure (‘right to be forgotten’) (Art. 17 UK-GDPR):If the legal requirements are met, you have the right to request the deletion of your data. This does not apply to data that is required for billing or accounting purposes or that is subject to a statutory retention period. However, if access to this data is not required, its processing will be restricted (see below).
Right to restriction of processing (Art. 18 UK-GDPR):If the legal requirements are met, you have the right to request a restriction of the processing of your data.
Right to data portability (Art. 20 UK-GDPR):You have the right to receive the data you have provided in a structured, commonly used and machine-readable format or – as far as technically possible – to request that we transmit this data to a third party.
Right to object (Art. 21 UK-GDPR):In addition, you can object to the processing of your personal data for direct marketing purposes at any time. Please note that for organisational reasons, there may be overlaps between your objection and the use of your data in the context of an ongoing campaign.
Objection to data processing on the legal basis of ‘legitimate interest’ (Art. 6 (1)(f) UK-GDPR):In addition, you have the right to object to the processing of your personal data at any time, provided that this is based on "legitimate interest". We will then stop processing your data unless we can demonstrate compelling legitimate grounds under the law that outweigh your rights.
Withdrawal of consent (Art. 7 (3) UK-GDPR):If you have consented to the processing of your data, you have the right to withdraw this consent at any time with effect for the future. The lawfulness of the data processing prior to your withdrawal remains unchanged.
Right to lodge a complaint with the supervisory authority (Art. 77 (1) UK-GDPR):You have the right to lodge a complaint with a supervisory authority. You can appeal to the supervisory authority which is responsible for your place of residence or your state or to the supervisory authority responsible for us:
Autoriteit Persoonsgegevens (AP) Hoge Nieuwstraat 8 P.O. Box 93374 2509 AJ The Hague Tel. +31 70 888 8500 Fax +31 70 888 8501 Website: https://autoriteitpersoonsgegevens.nl/
16. Changes to the Privacy Policy
We reserve the right to change our security and privacy practices. In such cases, we will amend our Privacy Notice accordingly. Therefore, please note the current version of our privacy policy, as it is subject to change.
17. Contact
If you wish to contact us, please use the address listed under "Controller (Art. 24 UK-GDPR)"
To exercise your rights or to report data protection incidents, please use the following email address: dataprotection.keenfinity@keenfinity-group.com.
For suggestions and complaints regarding the processing of your personal data, we recommend that you contact our Data Protection Officer:
IT-Security Coach GmbH Olper Hütte 5b 57462 Olpe Germany Telephone: +49 276183363100 Email: dataprotection@itsecuritycoach.com
Effective date: 17.12.2025 Last modified: 05.01.2026