Privacy statement

to inform you of how personal data is collected and processed by 12Build Sales B.V. and its affiliates (hereinafter collectively: “12Build”).

This privacy statement has been developed in accordance with the requirements of the General Data Protection Regulation 2016/679 (GDPR).

Contact information

As the data controller, 12Build is responsible for your personal data collected on our platform; www.12build.com. 12Build determines the purpose, scope, and the essential means for the collection of your personal data on the platform. If you have any questions regarding our processing of personal data, or if you wish to exercise your rights as described below, including your right to access or object to our data processing, please contact 12Build's Privacy Officer using the contact details below:

12Build Sales B.V.
Attn. The Privacy Officer
Ernst Machstraat 10
7442 DL Nijverdal
Email address: privacy@12build.com
Tel.: +31 (0)88 – 022 8400

What personal data do we collect?

Personal data is in most cases collected directly from you or generated as part of the use of our services on our platform. 12Build collects the following personal data:

• Name and position of contact person,
• Gender,
• E-mail address,
• DID number/mobile number,
• IP address and visit history,
• Voice log telephone contact with 12Build,
• Any personal quotes posted on the online platform (address, place of residence, bank account numbers etc. relate to business data only).

Why do we collect your personal data?

The primary purpose of 12Build’s platform is to enable customers, contractors and suppliers to connect and exchange Requests for Proposals (RFP’s), offers and orders through 12Build’s platform and the inherent specialist database. In order to use the services of 12Build, it is necessary to process your personal data. 12Build will process personal data for the following purposes:

• Performing the SaaS services, including continuously further enriching the databases;
• Acquiring new customers and other marketing activities;
• Handling orders for repro services;
• Communicating with customers for the purpose of support, invoicing and collection, expansion of functionality;
• Posting content on social media for marketing purposes;
• Maintaining the (financial) administration.

12Build will process personal data to document and complete tasks in order to fulfil our contractual obligations and to provide and administer our platform and our services to you. In addition to contractual obligations, processing of personal data will also occur to fulfil our obligations under law, other regulations, or authority decisions. Your personal data will also be processed when deemed necessary to further our legitimate interests, if those legitimate interests outweigh your interests or fundamental rights and freedoms. In certain situations, your personal data will be processed on the basis of consent, e.g., a customer story, photo or quote shall only be posted on the website following consent.

How is personal data processed?

We primarily process personal data about our customers and users on our platform, but only to the extent that it is necessary for the specific purposes and there is a legal basis. It will often be necessary for us to process ordinary personal data such as name, title, telephone number and e-mail address, in order for us to provide our services. We may as a consequence of the structure and purpose of the 12Build Platform also handle personal data of our customers’ business partners with the purpose of creating these business partners as users on the platform. In these situations, our customers are responsible for ensuring that they have the legal basis in accordance with the General Data Protection Regulation (GDPR), to disclose and archive the customer’s business partners’ personal data to us, e.g. by obtaining prior written consents from the business partners or assessing that the registration of the business partners’ employees’ names and contact details are legitimate purposes for the business relationship. We are in no way liable in case our customers have disclosed and recorded their business partners’ personal data to us without a legal basis. 12Build will act as a data controller for the information collected on our platform and the business partners’ relevant contact persons, whose names and contact details have been registered on the 12Build Platform by our customers, will receive an e-mail informing them that they have been registered on the 12Build Platform and of their rights, including information regarding the right and possibility to be
deleted from the 12Build Platform and a link to this Privacy Statement. Our platform shall not be used as a general storage service or a file sharing service of personal information (such as CV’s etc.) between the customers, contractors, and suppliers. 12Build is in no way liable in case of such use of our platform.

Retention period

12Build ensures that your personal data will not be retained for longer than necessary within the scope of the provision of services unless retention of your personal data is necessary to comply with a statutory
retention obligation or you request the erasure of your personal data. If there are overriding grounds, such as a statutory retention obligation, your request may be refused. Upon expiry of the applicable retention period, we will securely destroy your personal data in accordance with applicable laws and regulations.

Disclosure and transfer of information

12Build will only share your personal data with organizations to the extent we are under statutory obligation to do so or to fulfil services and agreements we have with our customers. These engaged organizations shall only have access to the personal data necessary to perform their task, and always under contractual obligation to keep your data confidential. 12Build's website and application (including customer personal data) are hosted in data centers within the European Union. 12Build will act as data controller in these situations and have entered into data processor agreements with these selected organizations to ensure legitimate processing. For the proper performance of its services, 12Build also uses third-party support services. To the extent that these service providers process personal data of customers outside the EU, this shall only be done in accordance with applicable privacy legislation. 12Build does not sell any personal data to third parties. Nor will 12Build disclose any personal data you provide to third parties for their direct marketing purposes.

Data security and integrity

12Build has drafted security policies and implemented measures to protect (personal) data from unauthorized loss, misuse, alteration or destruction. Access to your (personal) data will be strictly limited
to those who are involved in providing services to you on behalf of 12Build or who are otherwise authorized to do so within the frameworks of privacy legislation. Individuals who have access to the (personal) data are obliged to maintain the confidentiality of such information. Our ISO 27001 certificate demonstrates the high level of (personal) data protection we offer.

Rights of the data subject

As a data subject, you have several rights under the GDPR. You may exercise any of the below mentioned rights by sending an email, a letter or a request to our office. You have the following rights:

● Right to access: you have the right to access your personal data processed by 12Build. Your right to access may, however, be restricted by legislation, protection of other persons’ privacy and consideration for our business concept and business practices;
● Right of rectification: you have the right to rectify your personal data if it is inaccurate, not current or incomplete with the restrictions that follow from legislation;
● Right of erasure: you have the right to have your personal data erased if 12Build no longer needs it for the purpose for which it was processed;
● Right to restrict processing: if the accuracy of the personal data processed is disputed, the processing is unlawful, 12Build no longer needs the personal data for the processing purposes or you have objected to the processing, you have the right to restrict processing. In that case, the personal data may not be processed or modified (temporarily);
● Right to data portability: you may request to have all your personal data transferred by 12Build to another data controller, in a commonly used, machine-readable format;
● Right to object: you may object to the processing of your personal data by 12Build. In the event of such a request, 12Build will stop processing the personal data unless there are legitimate grounds that outweigh your interests;
● Right not to be subjected to automated processing: you have the right not to be the subject of a decision based solely on automated processing where the consequence has a legal bearing on you, such as profiling. 12Build does not engage in profiling.
● Withdraw of consent: If our processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. You can do this by contacting us using the contact details provided below.

Complaints

If you have a complaint about the practices of 12Build, you can submit it to 12Build, or you can file a complaint with the Dutch Data Protection Authority if it relates to the protection of personal data. You can
do this via: The website of the Dutch Data Protection Authority.