When does this privacy statement apply?
This privacy statement applies to our website, namely https://www.ctrldns.com, as well as all commercial relationships between us and our customers, prospects and business partners.

We emphasize that at all times we try to act in accordance with the Personal Data Protection Act (WBP) of September 1, 2001 and the General Data Protection Regulation (AVG) of May 24, 2016.

When do you agree to this privacy statement?
When you visit our website, create a (demo) account for the purpose of using the (demo) feature(s) of CtrlDNS, you give your express consent, by notice or opt-in, that you are familiar with the contents of this privacy statement and that you agree with the way we collect, process and use your personal data.

What personal data do we collect?
We may collect, process and use the following personal data:

• First name.
• Last name.
• Residential address.
• Company address.
• Email address.
• Business phone number.
• Phone number private.
• Username.
• Password.
• Company name.
• Chamber of Commerce number and VAT number.
• Information regarding the use you make of the website.
• Your mobile device login credentials and geographic location information.
• Communication preference.
• Correspondence data with and outgoing from ctrlDNS.

Information about the use of our website is collected automatically. This allows us to log which parts of the website are visited, which web browser you used, which website you visited before visiting our website and what your IP address is. Based on this data, we cannot identify you, but we can use these statistics for the functioning of the website and to send targeted communications.

How is personal data collected?
Personal data is collected by us at the following times:

• Creating an account or demo account.
• A collaboration with ctrlDNS.
• Website visit.
• The use you make of ctrlDNS's services, whether through a mobile device or not.
• Subscribing to the newsletter (through the website or otherwise).
• Requesting an (online) demo.
• The verification of your identity (e.g., when calling CtrlDNS customer service or recovering your password).
• Correspondence with and outgoing from ctrlDNS.
• Communicating to CtrlDNS ideas regarding the improvement of services.
• Requesting a quote.
• Exchanging business cards.

The personal data collected by us is provided by you expressly and voluntarily.

What will my personal data be used for?
We may use your personal data for:

• The creation of an account or demo account and its confirmation.
• The execution of an agreement with ctrlDNS.
• Providing the services of ctrlDNS.
• Providing support.
• Sending targeted marketing and advertising, updates and promotional offers based on your communication preference.
• Sending invoices and collecting payments.
• Optimizing the quality and management and content of the website.
• Statistical purposes.
• Formatting a quotation.
• Conducting customer satisfaction surveys, surveys and other market research.

Moreover, by way of cookies, personal preferences are deployed in an anonymous way for optimal user experience on the website and in the system. Browser cookies are used to remember preferences. Third-party cookies are used to provide marketing relevant to you. To get a complete picture of the use of cookies and your privacy, please read our cookie policy.

Will my personal data be shared with third parties?
No, we do not disclose your personal data to third parties, unless it is necessary in the context of providing our services and optimizing them (such as but not limited to maintenance work, payment processing, database management). When it is necessary for us to share your data with third parties, the relevant third party is obliged to use your personal data in accordance with this privacy statement.

Notwithstanding the foregoing, we may need to disclose your information:

• To competent authorities when:
  • CtrlDNS is required to do so by law or in connection with legal or prospective legal proceedings;
  • To safeguard and defend our rights.
• If CtrlDNS or substantially all of its assets are acquired by a third party, in which case your personal data
  which CtrlDNS has collected
  will be one of the transferred assets.
• For the purpose of detecting profiles similar to yours, except where you have expressly objected.

Will your personal data be stored?
Unless a longer retention period is required or justified by law or by compliance with a legal obligation, we will retain your personal data only for the period necessary to achieve and fulfill the purposes described under "What will my personal data be used for?".

What privacy rights do you have?
Would you like to invoke your privacy rights as defined below? You can exercise these rights free of charge at support@ctrldns.nl. You have the following rights:

• Right to access the personal data we have at our disposal;
• Right to rectify, complete or update your personal data;
• Right to delete your personal data, also called the right to oblivion;
• Right to limit the processing of your personal data;
• Right to portability of your personal data;
• Right to object/resist the processing of your personal data.

Do you no longer want to receive newsletters or information about our services? You can easily unsubscribe by clicking the unsubscribe button, as provided at the bottom of almost every email from ctrlDNS.

Is your personal data safe with us?
We will make every effort, physically, technologically and organizationally, to take sufficient precautions to ensure that no unauthorized use, loss, misuse or alteration of your personal data occurs. We collect all personal data on servers located in a data center within the EU.

Because your personal data is transferred primarily over the Internet, there can never be a 100% assurance that your data is transferred securely.

Finally, the security of your personal information depends on the confidentiality of your password to your user account(s) within our services. We will never ask you to share your personal password. If you have shared your password with a third party, for example for additional services, this third party has access to your account(s) and data. In this case, you yourself are liable for the action taken while using this account or these accounts. We would therefore strongly recommend that you contact us if you have determined that a third party has access to your user account(s).

Consent to the Use of Cookies.
We use cookies to ensure our website functions properly. To obtain your valid consent for the use and storage of cookies in the browser you use to visit our website, and to properly document this, we use a cookie consent management platform: CookieFirst. This technology is provided by Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH, Amsterdam, Netherlands. Website: CookieFirst Cookie Consent page, referred to as CookieFirst.

When you visit our website, a connection is established with CookieFirst's server to allow us to obtain valid consent from you for the use of certain cookies. CookieFirst then stores a cookie in your browser in order to activate only those cookies for which you have given consent and to document this properly. The processed data will be kept until the predetermined retention period expires or you request that the data be deleted. Notwithstanding the above, certain mandatory legal retention periods may apply.

CookieFirst is used to obtain legally required consent for the use of cookies. The legal basis for this is Article 6(1)(c) of the General Data Protection Regulation (GDPR).

Data processing agreement
We have entered into a data processing agreement with CookieFirst. This is an agreement required by data protection law, which ensures that data from our website visitors is only processed according to our instructions and in accordance with the AVG.

Server log files
Our website and CookieFirst automatically collect and store information in so-called server log files, which your browser automatically sends to us. The following data is collected:

Your consent status or withdrawal of consent

• Your anonymized IP address
• Information about your Browser
• Information about your Device
• The date and time you visited our website
• The web page url where you saved or updated your permission preferences
• The approximate location of the user who stored their consent preference
• A universally unique identification number (UUID) of the website visitor who clicked on the cookie banner

Is this privacy statement up to date?
It is possible, for whatever reason, that this privacy statement will be updated with different terms. Nevertheless, you can assume that the privacy statement as displayed on our websites is the most up to date version of our privacy statement.

What about the privacy of other websites?
Our websites sometimes make references to other websites. In no event are we responsible for the privacy policies or practices of this third party.

Where can you go with complaints?
Do you have complaints about the way we handle your personal data? In that case we would like to refer you to our support team (support@ctrlDNS .nl), you can also officially file a complaint with the Privacy Commission.

How can you contact us?
Would you like to contact us regarding this privacy statement or the use of personal data? You can contact us by email (support@ctrlDNS .nl) or by mail: CtrlDNS B.V., Grevelingenstraat 10H, 4301XX Zierikzee (the Netherlands).