I INTRODUCTION AND SCOPE
Aiosyn B.V., a private company with limited liability, with its registered office and official address at (6525 EC) Nijmegen at the Toernooiveld 300, registered with the Dutch Chambers of Commerce under number 83481435 (Aiosyn, we, us, or our) understands and respects your privacy.
Legal basis for processing
Under the GDPR Aiosyn may only personal data if there is a legal basis for such processing. The legal basis are:
- performance of an agreement;
- legal duty; and
- legitimate interest of Aiosyn or a thrid party.
Legitimate interests includes but is not limited to: advertising, marketing, security, auditing, fraud detection, (crime) prevention, (market) research and analysis and improvement of our services, internal management, legal affairs and business management. We indicated below the specific ground(s) that apply to a specific processing of personal data.
What data do we collect and for which purpose?
We collect your contact details to inform you
To answer your requests when you have contacted us for commercial enquiries, complaints and/or other questions, to share relevant business updates including product updates, publications and events with you, to authenticate your identity in case you contact us by electronic means or otherwise and to process and keep you informed about your job application we may process your contact details such as your (first) name, phone number and (email)address and address. We only process this data in order to provide you with the asked information or for processing your job application. Legal basis 1. or 4. applies.
For the aforementioned purpose and based on the same legal basis we may also collect other information you actively provided us with, for instance by submitting a contact form through the Website, or sending an email. This refers to any additional details you may include in the respective message.
We collect your usage data to improve our Website
To develop and improve our communication methods and the functionality of the Website and to improve our products, services and the Website, upon each visit to the Website the following data is collected: part of your IP address (including its location), your device type (PC, laptop, tablet, smartphone), your browser type, the website from which you accessed the Website, which third-party websites are visited through the Website and general information about your usage and interaction with the Website. Legal basis 4. applies.
How long do we keep your personal data?
Who else might receive it?
- Your personal data is only processed by persons working for and on behalf of Aiosyn for the purposes described above.
- When Aiosyn hires trusted third-party service providers for the processing and/or storing of your personal data, they only process such information based on our instructions.
- The data collected by Aiosyn will not be shared with any other third party without your prior consent.
- In case of a request of a legislative authority, Aiosyn may be required to share your personal information with such party by law.
The Website may contain links to and from third-party websites. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their use of visitor data. Please read their own privacy policies before submitting any personal information.
- Product support
When product support enquiries are sent, these are directly submitted to Aiosyn by means of the Jira Service Management software platform. Jira Service Management collects and processes personal data only where it has legal bases for doing so under applicable laws. Exchanged messages may be stored within the software platform for a period as long as required to fulfill post market surveillance requirements to medical devices, which can be as long as up to 10 years. In case you would like to have such information removed sooner, please let us know via https://support.aiosyn.com/ or email@example.com.
- Commercial requests
When you send Aiosyn a commercial request (e.g. to use our products, to partner up with Aiosyn, or any other form of interest in our solutions or in working with us), Aiosyn will store your data (name, email address and other relevant information you provide) in HubSpot, a third-party service provider’s platform. HubSpot operates in an international environment, and stores information on servers outside of the European Union, specifically within the United States. Hubspot complies with the relevant provisions of the GDPR to allow storage outside of the European Union. The information is stored for a period of 24 months after your last communication with Aiosyn. In case you desire to have such data removed sooner, please send a written request to Aiosyn via firstname.lastname@example.org.
- Business updates
Your contact details are recorded in our system and, if you have expressed interest in receiving email marketing communications, it may be used to send you relevant business updates, including product updates, publications and events. You can unsubscribe from these communications at any time.
What are cookies?
Cookies are used to improve your visit to our Website. They are small files that are automatically created by your browser and can be stored on your device. They help with the following:
- Remembering selections or preferences, thereby improving user experience
- Measuring how you navigate through our Website so we can make sure the Website meets your needs
Please note that we are not informed of your identity when you visit our website and we do not store personal data in cookies other than the information listed under ”What data do we collect and for which purpose?”.
According to the GDPR, you have certain rights regarding the personal data collected and processed by us. These rights enable you to retain control over the information concerning you, preventing unlawfulness or inaccuracy, and ensure transparency and trust between you and us. More detailed you are entitled to:
A. Right to access
You may request a confirmation of whether personal data that concerns you is processed by us. If such processing occurs, you have the right to access the personal data, as well as obtain some additional information. Such additional information includes the purposes for which the personal data is processed, the categories and recipients of the personal data, and the planned duration of storage. You also have the right to request information on whether your personal information is sent to a third country or international organization.
B. Right to rectification
You have the right to rectification and/or completion of your personal data, provided that the information concerning you is incorrect or incomplete. The rectification must be made without delay.
C. Right to erasure
In some circumstances you may request the immediate erasure of your personal information. Those circumstances include:
- The personal data is no longer required for the purposes for which it was collected or otherwise processed.
- You object to the processing of your personal data under certain rules of applicable data protection law.
- The processing is for direct marketing purposes.
- The personal information concerning you has been illegally processed.
There are some exclusions of the right to erasure, including where processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, or for the establishment, exercise or defense of legal claims.
D. Right to limit processing
Under the following circumstances, you can request a limit to the processing of your personal information:
- You contest the correctness of your personal data.
- The processing is illegal and you request a limitation of the use of your personal information, refusing erasure.
- We no longer require your personal data for the purposes of processing, but you require it to establish, exercise, or defend legal claims.
- You have submitted the objection to processing, pending the verification of that objection.
Where processing of your personal information has been limited, this data, except for its storage, may only be processed with your consent or for the establishment, exercise or defense of legal claims, or to protect the rights of another natural or legal person, or for reasons of important public interest. If processing was restricted according to the above circumstances, you will be informed before the restriction is applied.
E. Right to object
You have the right to submit at any time objection to processing of your personal information on grounds relating to your particular situation, but only to the extent that the legal basis for the processing is that the processing is necessary for: the performance of a task executed in the public interest or in the exercise of any official authority vested in us; or the purposes of the legitimate interests pursued by us or by a third party. If you object under these conditions, we will no longer process your personal data, unless we can provide evidence of compelling reasons for the processing that prevail over your interests, rights, and freedoms, or the processing is for the establishment, exercise or defense of legal claims.
F. Right to data transferability
You have the right to receive your personal information from us in a structured, standard, and machine-readable format. You also have the right to ensure that your personal data is transferred directly from us to another responsible party, when this is technically feasible. The right of data transferability does not apply in the following circumstances:
- Where it would adversely affect the freedom and rights of others.
- For processing personal information that is required to perform a task that is in the public interest or in the practice of public authority conferred to the responsible party.
G. Right to complain to a supervisory authority
You have the right to lodge a complaint with a supervisory authority (for the Netherlands this is the Dutch Authority for the Protection of Personal Data (In Dutch: Autoriteit Persoonsgegevens)) if you consider that our processing of your personal data infringes data protection laws. You may do so in the member state of your habitual residence or employment or the place of the alleged infringement. The supervisory authority shall inform you of the status and results of the complaint.
H. Right to withdraw consent
To the extent that the legal basis for our processing of your personal data is consent, you have the right to withdraw your declaration of consent at any time. The withdrawal does not affect the legality of the processing managed on the basis of the consent up to the date of the withdrawal.
For a complete description of the rights listed above, please read the relevant laws and guidance from your regulatory authorities.
Attn: Wouter Bulten
6525 EC Nijmegen
Chamber of Commerce number: 83481435