Privacy Statement
When you visit our website https://compliancechamps.com/ or make use of our services, Compliance Champs B.V. (”Compliance Champs”, “we” or “us‘) processes your personal data. Compliance Champs values your privacy and ensures due care with regard to the processing and protecting of personal data. During the processing of your personal data, we adhere to the requirements of relevant privacy laws-and regulations, including (from 25 May 2018 onwards) the General Data Protection Regulation (GDPR). In this Privacy Statement (the ”Statement”), we explain what types of personal data we collect, why we collect such data, how we deal with personal data and what rights you have relating to your personal data.
This Statement was last amended on March 5th , 2024.
1 Use of personal data
1.1 Compliance Champs processes your personal data because you have contacted us, work with us or because you have used our services.
We process the following (categories of) personal data about our website visitors, clients, business partners and self-employed people (who want to work through Compliance Champs):
- Contact details of website visitors, clients, self-employed people and business partners, such as:
- Name;
- Gender;
- Copy of identification document;
- Country of residence;
- Date and place of birth;
- Email address;
- Address;
- Phone number;
- Resumes;
- Company details, such as Chamber of Commerce number and place of
- Financial details of clients, business partners and self-employed people, such as:
- Card number;
- Bank account number;
- Other payment details we need to execute our agreements with clients, self- employed people and business partners.
- Any information you share with us via the open text field on the contact page on our website or via email.
2 Legal grounds of the processing of personal data
2.1 By using our website and/or our services the abovementioned categories of personal data may be processed. We may process your personal data on the following legal grounds:
- Contact details: We may process this personal data on account of a legitimate business interest and/or the execution of an We can only rely on our legitimate business interest, if it is fair and reasonable to do so.
- Financial details of clients, business partners and/or self-employed people: We may process this personal data on account of the execution of an agreement and/or legal
- Any information you share with us via the open text field on the contact page on our website: We may process this personal data on account of a legitimate business
3 Purposes of the processing of personal data
3.1 We may process your personal data for the following purposes:
- Managing our relationship with clients, potential and former clients, business partners and self-employed people;
- Responding to contact requests sent via the website or by email;
- To operate, manage, develop and promote our business;
- To approach potential clients and business partners;
- To operate, administer and improve our website and premises and other aspects of the way in which we conduct our operations;
- To comply with our legal and regulatory obligations and file and defend legal
When processing your personal information for these purposes, we process your personal data on account of a legal duty, the execution of an agreement and/or legitimate business interest as described in article 2.
3.2 We will only process your personal information if this is necessary for the purposes described above, and then only where we have concluded that our processing does not prejudice you or your privacy in a way that would override our legitimate interest in pursuing those purposes. In exceptional circumstances we may also be required by law to disclose or otherwise process your personal information. We will tell you, when we ask you to provide information about yourself, if providing the requested information is necessary for compliance with a legal obligation or, on the other hand, if it is purely voluntary. If it is voluntary there will be no implications if you decline to provide the information. Otherwise you should assume that we need the information for our business purposes (as described above).
4 Protection of the privacy of children
4.1 The Compliance Champs website and/or services are not specifically designed for children of 16 years of age and younger. It is not within our Statement to deliberately process their personal data. However, we cannot check whether a visitor is older than 16. We therefore recommend that parents be involved in the online activities of their children, in order to prevent data about children from being collected without parental consent. If you are convinced that we have collected personal information about a minor without consent, please contact us at info@compliancechamps.com and we will delete this information.
5 Retention of personal data
5.1 As a rule, we store your personal data for as long as necessary for the purpose for which the data were collected, as described in article 3.1. After the retention period is finished or when the data is no longer necessary for the purpose for which the data were collected, the personal data will be deleted.
5.2 We use the following retention periods for the following (categories) of personal data:
- Contact details will be deleted after processing the contact request if no further contact is desired or for as long as legally
- Financial details will be kept for as long as legally
- Any information you share with us via the open text field on the contact page will be deleted after processing the contact request if further contact is not
6 Security
6.1 Compliance Champs takes the protection of your data seriously and takes appropriate technical and organizational security measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. If you have the impression that your data is not properly secured or there are indications of misuse, please contact us at info@compliancechamps.com.
Compliance Champs has taken the following measures to protect your personal data:
- Access to personal data requires the use of a user name and password;
- SSL certificate: We send your data via a secure internet connection. You can see this in the address bar by ‘https’ and the lock;
- Encrypted communication on the platform;
- SSH port;
- Standardized software and hardware updates;
- User role management;
- Keeping logs of all requests regarding access to personal data;
- Two-factor
7 (International) data transfers and disclosure to third parties
7.1 Compliance Champs only provides personal data to third parties when this is necessary for the execution of our agreement with you, to comply with a legal obligation and:
- To improve our website and premises and other aspects of the way in which we conduct our operations;
- To service providers, including hosting providers, payment providers, administrative offices, e-mail service providers and (web) developers who host our website or other information technology systems or otherwise hold or process your information on our behalf, under strict conditions of confidentiality and security;
- To a person who takes over our business and assets, or relevant parts of them. A list of third party processors can be requested via info@compliancechamps.com.
7.2 Compliance Champs in principle does not share data with parties outside the European Economic Area (hereinafter: “EEA”). When sharing data outside the EEA we will ensure that our arrangements with them are governed by data transfer agreements or mechanisms, designed to ensure that your personal data is protected on the same level (including, where appropriate, under an agreement on terms approved for this purpose by the European Commission).
8 Third-party websites
8.1 This Statement is not applicable to third-party websites connected to our website through links. We cannot guarantee that these third parties will handle your personal data in a secure and careful manner. We recommend that you read these websites’ privacy statement’s before making use of these websites.
9 Your rights
9.1 You have certain rights involving the processing of your data:
- You have the right to request access to the personal data that we have registered about you;
- When the data is incorrect or no longer relevant, you can request any inaccurate personal information to be corrected, supplemented or deleted (right to rectification and supplementation).
- In some circumstances you have the right to limit the processing of your personal data by us;
- In some cases you have the right to be forgotten, which means we have to erase the personal data we hold from you;
- You can object to our use of your personal data at any time and you may have the right to object to our processing of some or all of your personal data (right to object) and require them to be deleted in some other circumstances;
- In some circumstances, you have the right to obtain a copy of your data in a usual, machine-readable format in order to be able to transfer it to another organization (right to data portability);
- You have a right regarding automated decision-making and profiling which means you have the right to a human review when decisions are being made.
9.2 To exercise your rights involving the processing of your data, you can contact Compliance Champs at info@compliancechamps.com. We may ask you to provide information in order to determine your identity and to ensure that no one other then you is trying to execute your privacy rights. We adhere to the legal deadlines regarding the execution of the request. This means that generally a request will be processed within one month. This period can be extended to two months if it is considered a complex request. You will be notified when the period is extended. In certain cases, if legally permitted, we may deny your request. We will inform you about the reason for denying your request.
10 Cookies
10.1 When you visit our site, we may obtain information about you by using a “cookie”, which is a small file transferred by a website and stored on your device (such as your computer, mobile phone, tablet, etc.). Cookies could contain personal information about you that is transferred to your device. They help us to improve our website and to deliver a better and more personalized service. Some of the cookies we use are essential for the site to operate. You can read more about what cookies we use, for what purpose and how to accept or reject them in Compliance Champs Cookie Statement. You can unsubscribe from cookies by setting your internet browser so that it no longer stores cookies. In addition, you can also delete all information previously stored via your browser settings.
11 National supervisory authority
11.1 Of course, we will gladly help you if you have any complaints about the processing of your personal data. Based on privacy legislation, you have the right to lodge a complaint with the relevant national data protection authority, responsible for the protection of personal data (this is the ‘Autoriteit Persoonsgegevens’ for the Netherlands) against our processing of your personal data via the following link: https://autoriteitpersoonsgegevens.nl/nl/meldingsformulier- klachten.
12 Changes to this Privacy Statement
12.1 We reserve the right to modify this Statement. We recommend that you review this Statement regularly, so that you remain informed of any possible changes.
13 Contact information
13.1 In case you still have questions and/or suggestions after reading our Privacy Statement, you can contact us via the website or email as stated below.
Compliance Champs B.V.
Compliance Champs B.V. Weena 505 (Unit 17.03)
3013 AL Rotterdam