Who we are
We, secctl.io, are the controller for the processing described in this statement. Send questions about your privacy to privacy@secctl.io.
Two roles
For this website, for requests and for our customer relationship, we decide what happens to your data. That is what this statement covers.
If you use Awareness because your employer is a customer, your employer decides what happens to your data, and secctl.io processes it on your employer’s behalf. The data processing agreement sets this out. Take questions about it to your employer first. You can also view, download and delete your own data directly in Awareness.
When you visit this website
This website sets no cookies and does not track who visits. It loads no fonts, scripts or images from other parties, so they don’t see your visit either.
Like any web server, ours records technical data when you request a page: your IP address, the time, the page and your browser type. We use it only to detect faults and abuse, and keep it no longer than that requires. The legal basis is our legitimate interest in a secure website.
When you fill in a form
If you request a trial environment or ask a question, we ask for your name, your email address and what you need from us, such as your organisation’s name and your question. The form sends this to us by email. The website itself does not store it.
We use this data to answer your question or set up your environment. The legal basis is that you are asking us to prepare a contract, or our legitimate interest in answering you. If no contract follows, we delete your message once your question has been dealt with.
When you are a customer
For the contract and invoices we keep your organisation’s name, your contact person and their email address. The legal basis is the contract. We keep invoices and related records for seven years, because Dutch law requires it.
Who else sees your data
We don’t sell your data or pass it on to others for their own purposes. Parties that work for us, such as our hosting and email provider, process data only on our instructions.
Your rights
You can ask us:
- which data we hold about you, and for a copy;
- to correct data that is wrong;
- to delete your data;
- to restrict how we use your data;
- to give your data to you or to someone else in a common file format.
You can also object to processing based on our legitimate interest. Email your request to privacy@secctl.io. We reply within one month, as the GDPR requires.
Complaints
If you are unhappy with how we handle your data, please email us first. If we can’t resolve it, you can complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.
Changes
When this statement changes, it gets a new date at the top. If a change affects customer data, we email customers beforehand.