General
This privacy statement was most recently amended on 6 July 2022.
We, Xyall B.V., are the controller of your personal data. This statement sets out how we handle your personal data. You can be confident that we handle your personal data with due care. You can reach us by e-mail: privacy@xyall.com or by post to: Xyall B.V., ESP 405, 5633 AJ, Eindhoven in the Netherlands.
If you are a client of us, or your company is a client of ours and you have contacted us for information on our products or services, then this statement is for you. Furthermore, this statement is important to all persons who visit our websites or persons who have subscribed to newsletters or events.
We will process your personal data for carrying out business with you. For example, we record and use personal data relating to contact persons at companies to which we provide services and with whom we are in correspondence. Further information concerning why we process personal data will be set out in this statement.
What is personal data and for what purposes do we use your personal data?
Personal data is information that says something about you. The best known forms of personal data are your name, address, email address, age and date of birth. Personal data also includes your phone number and for example your IP address. We use your personal data to help make our operations and our services as effective, reliable, and efficient as possible.
If you are a visitor of our website we will only process the data that will be saved based on the cookies (which not all will qualify as personal data), and you can register for our newsletter by submitting your e-mail address and name. We will then use your e-mail address and name for sending our newsletters.
If you are a customer of ours, we will use your personal data to stay in touch and to provide you with the necessary information in relation to your order.
If you contacted us for information or other questions, we will process the data you have provided to us. The purpose will depend on your request, but we will use your personal data to get back to you on the request.
If we would like to use your personal data for any other purposes than those listed below, we can only do so if this is in line with the purpose(s) for which we have initially have collected your personal data. Otherwise, we first need to obtain a new ground to process your personal data for those other purposes.
We do not process categories of special data.
What is the legal basis for our processing of your personal data?
Processing of personal data is only allowed when it is based on one of the “grounds” permitted by law. This means that we may use your personal data for one or more of the following permitted reasons:
- necessary to perform our contract with you
- to serve our legitimate interest or those of others
- Necessary to comply with a legal obligation
- when you have given your consent
Our legitimate interests is to optimize our services. Our website is part of that and we would like to provide you the best experience when visiting our website to make sure you will receive the information and experience you expect from us.
If you have given us your consent for the processing of your personal data, you may withdraw this consent at any time. You can send a request to this effect to privacy@xyall.com.
Use of cookies
We make use of cookies and similar technology on our websites. For more details, see our Cookie Statement at www.xyall.com/cookies. Personal information could be captured by our cookies in the event of error events when you visit our websites to allow us to improve our online services to you.
Other parties using your personal data
Sometime its necessary to provide your personal data to third parties, a sub processor. For example if we use service providers like IT providers. If we use sub processors, third parties that process your personal data in our name, we will make sure we have the legal documents in place to process your personal data in line with the GDPR. These parties are only allowed to process your personal data under our conditions and instructions.
However, it could be the case that we need to provide your personal data to a third party, not being a sub processor, for example to competent (public) authorities. We will only provide your information if we are legally obliged to do so.
Use of your personal data for marketing purposes and Social media
When you subscribed for our newsletter we will send you messages to inform you about our company and products. On our website you can find embedded information like our stories which are linked to YouTube. Next to our website we use other social media channels to inform you about Xyall products, for example LinkedIn. Please note that we do not own these channels and do not control their way of processing personal data.
Security
To ensure the highest possible level of protection for your information, we invest in our systems, procedures and people.
Personal data outside Europe
We may occasionally share personal data with other companies or organisations outside Europe, for instance in the context of an outsourcing agreement or when our (IT) suppliers are located (partly) outside of the European Economic Area. In that case, we will verify that the country has adequate equivalent protections in place, or we will sign separate agreements with those parties that meet the GDPR standards.
Retention periods of your data
As set out under the General Data Protection Regulation, we keep personal data in any event for as long as is necessary to achieve the purpose. The law does not stipulate specific storage periods for personal data. However, other legislation may specify minimum storage periods. If it does, we are under the obligation to observe these periods. Such legislation includes tax laws. Another reason for which we may keep your data longer is if we become involved in a lawsuit or other legal proceedings.
What rights do you have?
Right to object to processing for direct marketing purposes
If you no longer want to receive offers for our products and services, you can unsubscribe at any time. All marketing messages include this possibility, and you can follow the link at the bottom of the marketing messages to exercise this right easily.
Right of access, right to rectification, right to be forgotten, right to restriction of processing.
If you would like to use one of these rights, please send us an e-mail – privacy@xyall.com – with a detailed request and make sure it is very clear what right you are using.
Do you have a complaint or want to ask a question?
Please contact us if you have any questions about the Privacy Statement. We will be happy to help you.
You also have the right to take your complaint to the Data Protection Authority (Autoriteit Persoonsgegevens).
Changes to the Privacy Statement
Changes to the law or our services and products may affect the way in which we use your personal data. If this happens, we will publish an updated version of our statement on our website.