AxonDPIA privacy statement

This statement is about AxonDPIA. It describes the parts that are switched on now; a part that is not on yet, such as ordering or the expert review, appears here only when it goes on. When a part is added, we extend this statement beforehand. The Dutch text prevails.

Who we are

AxonDPIA is a service of Axon Factory, a trade name of M. de Jager Holding B.V., Kweeklust 7, 2203 ZB Noordwijk, the Netherlands, Chamber of Commerce 60613319. Axon Factory is the controller of the data on this page. Questions about your data: support@axonfactory.ai.

Which data, what for and on which legal basis

The questionnaire

Your answers are choices and categories. Only the name and Chamber of Commerce number of your organisation are entered by you; for a sole proprietorship that can be your own name. We do not ask for names of other people. We check free text for e-mail addresses, phone numbers and similar data. We store the answers encrypted and link them to an anonymous session in a cookie the questionnaire needs to work. We also keep where the link you came from was shared (a short code). Legal basis: at your request, before entering into a contract (art. 6(1)(b) GDPR).

Save and continue later

If you ask for a link to continue later, we use your e-mail address for that link for this questionnaire, next to a pseudonymised (hashed) version. Legal basis: at your request (art. 6(1)(b) GDPR). If you also tick the separate box, we send one reminder when you have not continued for 3 days, with a new link and a stop link. That box is off by default. Legal basis for that reminder: consent (art. 6(1)(a)); you can withdraw it with the stop link or via support@axonfactory.ai.

Looking up the Chamber of Commerce register

If you enter your organisation's Chamber of Commerce number and click Look up, we ask the Chamber of Commerce for the name and the sector. The Chamber of Commerce only receives the number. Legal basis: legitimate interest (f): you do not have to type name and sector yourself.

The free result

For the confirmation mail we use the e-mail address you enter. To limit abuse we keep a pseudonymised (hashed) version of your e-mail address and IP address for 48 hours. The result is stored encrypted. Legal basis: at your request (b); limiting abuse: legitimate interest (f).

News from Axon Factory

Only if you choose so separately: on the page of your result or when ordering. The box is off by default and separate from your order. We then pass your e-mail address and, if you entered it, the name of your organisation once to the contact list of Axon Factory, with the time and the text you saw. After a free result we send at most one reminder, and none while ordering is not possible yet. Legal basis: consent (art. 6(1)(a) GDPR). You can withdraw it at any time with the unsubscribe link or via support@axonfactory.ai.

Who receives the data

We do not sell data. These parties receive data, each only what they need. Processors work on behalf of Axon Factory, under a data processing agreement.

Microsoft Azure: hosting of the website, the database and the encrypted answers, in West Europe (the Netherlands). Processor.
Resend: sends the mails of AxonDPIA. Receives the e-mail address and the content of the mail. United States, with the EU-US Data Privacy Framework and standard contractual clauses. Processor.
Dutch Chamber of Commerce (Trade Register): receives the number you look up. The Netherlands.
AxonHub: Axon Factory's own system for the contact list (only if you choose news) and, with an order, the payment, the invoice and the credit note.

Transfers outside the EEA

We store your data within the EEA (Microsoft Azure, West Europe). Resend sends the mails from the United States. Resend participates in the EU-US Data Privacy Framework; in addition the standard contractual clauses of the European Commission apply. You can request a copy of the safeguard via support@axonfactory.ai.

How long we keep data

Your answers and the e-mail address for the link to continue: 30 days after your last activity, as long as you do not order.
An e-mail address of a free result you do not confirm: until the link expires (30 minutes), then deleted.
The pseudonymised (hashed) versions of e-mail address and IP address: 48 hours.
The stored result and, if you chose news, your e-mail address: until it has been passed to the contact list once and the reminder has been sent, and at the latest 30 days after the request.
After that we keep only counts, such as how many results had which outcome. What remains is the date, the outcome and the origin code of the link: no answers, no e-mail address and no hashed data.

Your rights

You can ask us to access, correct or delete your data, to restrict the processing or to port your data, and you can object. If you gave consent, you can withdraw it at any time; what we did before the withdrawal remains lawful. Mail support@axonfactory.ai; we reply within one month. Because the questionnaire is anonymous, we will ask you for the link from your mail so we find the right session. If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority.

Do you have to provide data?

No. You do not have to give us an e-mail address. Without one you can fill in the questionnaire, but you get no link to continue later and no free result.

Automated assessment

The check computes automatically with your answers. That is not a decision about you as a person within the meaning of art. 22 GDPR; you decide yourself what you do with the result.

Cookies

We use one functional cookie: the session of your questionnaire. No analytics or advertising cookies.

Data about other people. The questionnaire only asks for choices and categories, not for data about your employees, customers or others. We check free text for e-mail addresses and phone numbers. If you still enter such data, we only use it to make your questionnaire and result, and delete it together with the rest of your answers.