Privacy Statement – Taxameter Centrale B.V. / Payflux

1. Introduction

Taxameter Centrale B.V. (“TMC”) respects your privacy and handles personal data with care.

This privacy statement applies to personal data that TMC processes for its own purposes and under its own responsibility, including personal data provided through the following websites and channels:

• www.taxameter.nl;
• www.payflux.nl; and
• other direct contact channels of TMC.

TMC also provides systems and services to municipalities and other business customers. As part of these services, personal data may be processed on behalf of these customers. Where TMC acts solely as a processor, the customer concerned, as the controller, determines the purposes and legal basis for processing personal data. Such processing therefore falls outside the scope of this privacy statement as processing carried out by TMC in its own capacity as controller.

Payflux is a trading name of Taxameter Centrale B.V. under which payment services are offered.

2. Who is responsible for your personal data?

For the processing activities covered by this privacy statement, the controller is:

Taxameter Centrale B.V.
Chamber of Commerce registration number: 33030098
H.J.E. Wenckebachweg 80
1114 AD Amsterdam-Duivendrecht
The Netherlands

TMC has appointed a Data Protection Officer (DPO). The DPO can be contacted at:

dpo@waysis.com

For requests concerning your personal data, please contact:

dpo@waysis.com

3. When does TMC process your personal data?

TMC processes personal data when you contact us directly, for example when you:

• request information through our website;
• complete a contact form;
• contact us by email or through another communication channel;
• request information about our products or services.

We use this data solely for the purpose for which you provided it to us, in particular to respond to your question or request for information and to handle any resulting communication with you.

4. What personal data is processed?

Depending on how you contact us, we may process the following personal data, among other things:

• name;
• business email address;
• telephone number;
• company name and job title;
• the content of your question or request;
• any other data you provide to us.

We do not request more personal data than is reasonably necessary to handle your request.

5. Purpose, legal basis and retention period

TMC processes your personal data solely for specified purposes and on the basis of an applicable legal basis under the General Data Protection Regulation (GDPR).

image

TMC determines the specific retention period for general enquiries and requests for information based on the need to keep such correspondence available for a limited period after the enquiry or request has been dealt with.

Personal data is deleted or anonymised when the applicable retention period has expired, unless further retention is necessary to comply with a legal obligation or for the establishment, exercise or substantiation of a legal claim.

6. TMC as a processor for its customers

TMC provides systems and services within which personal data may be processed, depending on the service concerned. This may include, for example, transaction data, vehicle registration data or other data necessary to deliver the agreed services.

Where TMC processes this personal data solely on behalf of a customer, TMC acts as a processor within the meaning of the GDPR. In that case, the customer is the controller and determines, among other things:

• the purpose of the processing;
• the applicable legal basis;
• which personal data is processed;
• the applicable retention periods; and
• how data subjects are informed about the processing.

TMC processes this personal data solely in accordance with the agreements and documented instructions of the customer concerned.

If your request relates to personal data that TMC processes on behalf of a customer, it may be necessary to forward your request to, or coordinate it with, the controller concerned.

7. Payflux and legal obligations

To the extent that TMC/Payflux is required to process personal data for its own legal or compliance obligations when providing payment services, TMC acts as the controller for that specific processing activity.

TMC processes such personal data when and to the extent necessary to comply with applicable legal obligations and obligations arising from regulatory supervision of its services.

Data may be disclosed to competent supervisory authorities or other government bodies where TMC is legally required to do so.

8. Disclosure to third parties

TMC does not disclose personal data to third parties unless this is necessary for the relevant processing purpose or TMC is legally required to do so.

TMC may use service providers for its own business operations, for example for hosting, IT services or communication. Where such a party processes personal data on behalf of TMC, appropriate contractual arrangements are put in place in accordance with the GDPR.

9. International transfers

TMC aims to process personal data within the European Economic Area (EEA).

Where personal data is processed outside the EEA, TMC ensures that a valid legal basis for the transfer and appropriate safeguards are in place, such as an adequacy decision by the European Commission or the applicable Standard Contractual Clauses (SCCs).

10. Security

TMC implements appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration, disclosure or other unlawful processing.

Where appropriate, these measures include access controls, authorisation management, logging, monitoring and encryption.

11. Your privacy rights

Where TMC is the controller, you have the following rights under the GDPR, where applicable:

• access to your personal data;
• rectification of inaccurate personal data;
• erasure of personal data;
• restriction of processing;
• data portability;
• objection to processing.

Requests may be sent to dpo@waysis.nl.

Where your request relates to personal data that TMC processes solely as a processor on behalf of a customer, the request will generally be handled by that customer as the controller. TMC supports its customers in this respect to the extent required by the GDPR and the agreed arrangements.

12. Cookies

Our websites may use cookies and similar technologies. The cookies used, their purposes and their duration are described separately in our Cookie Statement.

13. Complaints

If you have any questions or complaints about how TMC processes your personal data, you can contact TMC or our Data Protection Officer.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

14. Changes

TMC may amend this privacy statement where changes to our processing activities, services or applicable laws and regulations require this.

The most up-to-date version will be made available on our website.