Privacy policy

Introduction

This privacy policy describes how Capisoft ("we", "us" or "our") collects, uses and shares personal information when you visit our website or use our services. We strive to protect your privacy and keep your personal data secure in accordance with applicable law, including the General Data Protection Regulation (GDPR).

Principles

• The organisation recognises the importance of information security and the protection of privacy.
• The organisation conforms to the principles of privacy by design and privacy by default.
• To demonstrate that the organisation complies with the most recent regulations, such as the GDPR, ISO 27001 and an Information Security Management System (ISMS) have been implemented.
• A risk assessment shows how data is used in the organisation's processes.
• Measures have been implemented to ensure adequate security of stored data and data in transit.
• Processes have been adapted to ensure that data is not stored for longer than necessary for the performance of services.
• For verification purposes, the implemented measures and controls are recorded in a Compliance Statement, which is available upon request.

Collected data

We collect different types of personal data for different purposes to provide and improve our services. This data may include:

• Name
• Contact details such as email address and telephone number
• Company information
• Information about your use of our services, such as pages visited or functions used
• Other information you voluntarily provide while interacting with our services, for example in the Idea Studio or when booking a consultation

Use of data

We use the collected data for various purposes, which may include:

• Providing and maintaining our services
• Improving, personalising and expanding our services
• Communicating with you about our services, including providing updates and newsletters
• Analysing trends and collecting statistics to understand and improve the performance of our services
• Protecting our rights, property and safety, and that of others

Sharing data

We share your personal information with third parties only in limited circumstances, which may include:

• With your permission
• With service providers acting on our behalf who carry out or support data processing
• To comply with legal obligations or to respond to court orders

Data security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, disclosure, alteration and destruction.

Privacy by design and privacy by default

We apply the principles of privacy by design and privacy by default when developing and managing our systems and services. This means that we take the protection of your privacy into account from the design of our systems and services, and that we use the highest privacy settings as standard.

ISO 27001 and ISMS

To ensure that we comply with the latest regulations and the highest standards for information security, we have implemented ISO 27001 and set up an Information Security Management System (ISMS). This allows us to identify, assess and manage risks relating to the processing of personal data.

Risk assessment

We regularly conduct risk assessments to evaluate how personal data is used in our processes. Based on these assessments, we implement appropriate measures to ensure the confidentiality, integrity and availability of personal data.

Security of data

We have implemented technical and organisational measures to ensure adequate security of stored data and data in transit. This includes encryption, access control and regular security audits.

Data retention

We do not store personal data for longer than is necessary for the performance of our services and compliance with legal obligations. When personal data is no longer needed, we securely delete or anonymise it.

Your rights

You have certain rights in relation to your personal data, including the right of access, rectification, erasure, restriction of processing, data portability and objection to processing. If you would like to exercise these rights or have questions about how we process your personal data, you can contact us using the details below.

Contact

Capisoft B.V.

Rokin 34

1012 KT Amsterdam

The Netherlands

Phone: +31 20 210 1716

Email: info@capisoft.nl

Changes to this privacy policy

This privacy policy may be updated from time to time to reflect changes in our practices. We recommend that you regularly check our privacy policy for any changes.