1. About Us

Taem.io is part of De Beste Koffie B.V. Taem.io is responsible for the processing of your personal data within the meaning of the General Data Protection Regulation (GDPR). Our contact details are as follows:

De Beste Koffie B.V. Division Taem.io Pim Mulierlaan 7 Heerenveen

Questions or requests:

Email: info@taem.io Tel: 0502110012 Attention: Schelte Meinsma

This privacy statement applies to the use of the website and app and the related services provided by Taem.io. The effective date of these terms and conditions is March 1, 2020. The publication of a new version renders all previous versions invalid.

We ask you to carefully read this privacy statement. This statement contains important information about who we are, what data we collect about you, why we collect this data, and how we collect, store, use, and share your personal data. You will also find information about your rights regarding your personal data and how to contact us or the Dutch Data Protection Authority in case you have a complaint about our actions in this regard.

The privacy statement should be read in conjunction with our general terms and conditions.

We operate in accordance with the General Data Protection Regulation. This means the following:

• Before processing personal data, we explicitly state the purposes for which we do so through this privacy statement.
• We only process the personal data that are necessary for the provision of our services.
• If we legally require your consent to process personal data, we will explicitly request that consent from you.
• We take the necessary measures to protect your personal data.
• We impose the same requirements on third parties processing personal data on our behalf.
• You have the right to request access to, rectification of, and/or erasure of the personal data we have collected about you.

2. Personal Data

When using our services, we collect the following personal data:

• Your name, email address, position, organization, and team you work within.
• Payment details (if you are a manager/employer).
• Information you provide when answering questions in the app (“Assessment Information”).
• Special categories of personal data as referred to in Article 9 of the GDPR, including possible information about your health and philosophical beliefs, solely with your explicit consent.
• Your IP address to receive and send information to and from you.
• Your visits to our website.

3. Purposes

We only use your personal data for the purposes of providing our services. This means that the purpose of the processing is always directly related to the assignment entrusted to us.

We process your personal data for the following purposes:

• We use your name and contact information to create and manage your account, enabling you to use our services.
• For the development, compliance, and execution of the agreement entered into between you/your organization and us.
• In particular, we use the Assessment Information to create your personal report and anonymously report on the composition and functioning of the team.
• For the administration of sales invoices.
• Usability and quality analysis to improve our services/website.
• For sending newsletters, promotions, and other marketing purposes.

4. Legal Basis

We process your personal data solely for the execution of the agreement between you and us when you register, create an account, and use our services or features.

The legal basis for processing your data for usability and quality analysis to improve our services is our legitimate interest in analyzing website usability and user satisfaction.

5. Recipients of Personal Data

We share your personal data with certain third parties. Below you can read who these third parties are, where the data is stored, which security techniques are used, and who has access to the data. These third parties are all bound by confidentiality obligations based on a data processing agreement concluded with them or due to a legal obligation.

Your team leader or employer does not receive personally identifiable information about you unless you expressly consent to it.

We share your personal data with third parties if required by law. We may also share your personal data with third parties in connection with a business sale/transfer or acquisition. Other third parties with whom we share your personal data include:

• Microsoft, for sending and receiving emails.
• Google, to analyze visitor behavior on our website and for website management.
• Website software: our website is developed by the company DBK and runs on their software.
• Personal data that you provide to us is shared with this party. DBK has access to the website to provide us with (technical) support.

In exceptional cases, Taem.io may be required by law to share your data in connection with tax or criminal investigations by the authorities. In such a case, we are obliged to share your personal data, but we will resist within the possibilities offered by the law.

We keep a list of all third parties processing your personal data on our behalf. In practice, we will always ensure that we only share the necessary information for the relevant service with third parties.

Taem.io does not share personal data relating to you with third parties outside the European Union or the European Economic Area.

6. Retention Periods

Taem.io does not retain the personal data it processes longer than necessary for the processing purposes stated in this privacy statement. We keep your data for as long as the assignment continues. This means that we retain personal data until the client indicates that they no longer wish to use our services. You can also make a personal request to have your data deleted in the meantime.

7. Rights regarding the Processing of Personal Data

Under applicable Dutch and European legislation, you have certain rights with regard to the personal data processed by or on behalf of us. We explain below what these rights are and how you can exercise them. If you wish to exercise any of these rights, please contact our privacy contact person via [email address].

We keep a record of processed requests. In the case of an erasure request, we will, if technically possible, record anonymized data. All copies and copies of data will be provided to you in the machine-readable data format that we use within our system.

Right of Access

You have the right to access the data we (or third parties processing data on our behalf) process and that are related to you or can be traced back to you. You can submit your request to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send you a copy of all data, including an overview of the processors who have access to this data, indicating the category under which we have stored this data, to the email address we have on file.

Right to Erasure

You have the right to have the personal data we (or third parties processing data on our behalf) process and that are related to you or can be traced back to you, deleted. This applies if the data is no longer necessary for the purposes for which we need to process it as described above or if we are no longer entitled to process the data. You can submit your request to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation, to the email address we have on file, that the relevant data will be deleted as far as (technically) possible.

Right to Rectification

You have the right to have the personal data we (or third parties processing data on our behalf) process and that are related to you or can be traced back to you, corrected. You can make a request to that effect to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation, to the email address we have on file, that the data has been corrected.

Right to Restriction of Processing

You have the right to limit the processing of personal data that we (or third parties processing data on our behalf) process and that are related to you or can be traced back to you. This applies, for example, if the data is no longer accurate, the processing is unlawful, or if we no longer need your personal data. You can make a request to that effect to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation, to the email address we have on file, that the data will no longer be processed until you lift the restriction.

Right to Data Portability

You have the right to have the personal data we (or third parties processing data on our behalf) process and that are related to you or can be traced back to you, transferred to another party. You can make a request to that effect to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send you copies or excerpts of all your personal data as we have processed it or as it has been processed by other processors or third parties on our behalf, to the email address we have on file.

Objection and Other Rights

In certain cases, you have the right to object to the processing of your personal data by or on behalf of Taem.io. If you object, we will immediately cease processing the data pending the resolution of your objection. If your objection is justified, we will provide you with copies and/or copies of data that we (or third parties processing data on our behalf) process and that are related to you or can be traced back to you, and then permanently cease processing the data. If you object to the use of personal data for direct marketing purposes, we will no longer use your personal data for that purpose.

Withdrawal of Consent

If we have obtained your personal data for a specific purpose based on your explicit consent, you may withdraw that consent at any time. The withdrawal of consent does not affect the lawfulness of the processing prior to the withdrawal.

Complaints

If you have complaints about how we handle your personal data, you have the right to submit your complaints to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

8. Security of Personal Data

We have implemented appropriate organizational and technical measures to secure your personal data against loss or other forms of unlawful processing. These measures provide a level of security that is appropriate for the data we process.

People or organizations with access to your personal data in connection with its processing are subject to requirements and are bound by confidentiality.

We have established a policy for handling (potential) data breaches. If we suspect a data breach, we will, if required by law, notify you and the Dutch Data Protection Authority.

9. Cookies

For many of the functionalities offered by our website and app, cookies are necessary. Some cookies do not require your consent, such as cookies that are necessary for the functioning of the website and those collected for a legitimate interest of our organization. Other cookies may only be collected with your consent. By using our website and app, you also consent to the use of these cookies. The way we use cookies is described below.

We use “persistent” cookies on our website/app. Persistent cookies will remain on your device until they are deleted or until a specific date when they are automatically deleted.

We use cookies to recognize you when you visit our website and to track your preferences related to the use of our website.

We use Google Analytics to analyze the use of our website. This third-party may also use cookies to collect technical information about your use and your device.

Most browsers allow you to reject all cookies; however, some browsers only allow you to reject third-party cookies. Rejecting all cookies will negatively affect the use of websites, including the Taem.io website and app.

10. Changes

We reserve the right to modify our privacy statement at any time. However, you will always find the most recent version on this page. If the modified privacy statement has an impact on the way we process your already collected personal data, we will notify you of this by email.