the can do company is a trade name of Innovation Booster Global B.V.

‍

Privacy Statement

Last updated: 19/08/2024

Innovation Booster B.V. (hereafter: Innovation Boosters) is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Statement explains how we collect, use, disclose, and protect your information in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Collecting and storing data

At Innovation Boosters we collect and store the following data:

- Name(s)

- Gender

- Company and company information

- Function/Job title

- Telephone number

- E-mail address

- Office address

- Information you freely provide us

- Information from cookies (as detailed in our Cookie Statement)

Legal bases and purposes

We process your personal data based on the following legal bases:

- Contractual agreement

- Legal obligation

- Legitimate interest

- Free, specific, informed, and unambiguous consent

The purposes for which we process your personal data include:

- Provision of services and products

- Contacting our offices

- Visiting this website and social media

- Internal operations

- Financial administration

Access to data

The collected and stored data is only accessible to those who need to work with the information. We only pass on the information to other parties if it is necessary for our services, such as our payment partners and IT service providers.

In suspicious situations, we may be required to share customer data with government agencies. Where necessary, we have Data Processing Agreements in place. According to relevant laws, Innovation Boosters is obliged in some cases to provide personal data to third parties. We never sell your data to third parties.

Within Innovation Boosters, we use the need-to-know and need-to-use principle for access to information.

Storage and protection of data

Your data is stored securely in a cloud environment within the European Union. We do not transfer your personal data outside the European Economic Area (EEA).

We apply strict security measures to protect our and your information. To demonstrate our commitment to information security, Innovation Boosters is ISO 27001 certified. This internationally recognized standard for information security management systems (ISMS) ensures that we have comprehensive security measures in place at organizational, technical, and human levels. Our ISO 27001 certificate and Statement of Applicability are available for viewing on our website.

We store your information only for as long as legally permitted and necessary for the purposes for which the data has been processed. Specific retention periods vary depending on the type of data and can be found in our Information Retention Policy. When the retention periods expire, your data will be securely deleted and destroyed.

Rights of data subjects

As a data subject, you have the following rights regarding your personal data:

1. Right to information

2. Right of access and to receive a copy

3. Right to correction and supplement

4. Right to erasure ('right to be forgotten')

5. Right to restriction of processing

6. Right to data portability

7. Right to object

8. Rights related to automated decision-making and profiling (Note: Innovation Boosters does not currently employ automated decision-making or profiling techniques

To exercise these rights or for any questions about how we handle your data, please contact our Data Protection Officer via email at dpo@innovationboosters.com

Data Protection Officer

Our designated Data Protection Officer is Allard Volker. You can contact them at:

Email: dpo@innovationboosters.com

Post:

Innovation Boosters

Attn: Data Protection Officer

Trompenburgstraat 2c

1079 TX, Amsterdam

The Netherlands

Data Breach Notification

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay, in accordance with our Incident Management & Vulnerability Policy and GDPR requirements.

Consent Management

We obtain your consent through an opt-in mechanism. You have the right to withdraw your consent at any time.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children.

Updates to this Privacy Statement

We review and update this Privacy Statement annually. The latest version will always be available on our website.

Complaints or questions

For questions or complaints about your data and the protection of your privacy, you can contact the Data Protection Officer of Innovation Boosters using the contact information provided above.

If you are not satisfied with how Innovation Boosters handles your privacy concerns, you can contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): https://autoriteitpersoonsgegevens.nl/nl

‍