Privacy policy

1Who we are

Senpai B.V. (KvK number 98074644), trading under the name aishaa, is the controller for the processing of personal data via the website aishaa.co.uk. You can reach us via the contact form or by email at contact@oostwest-it.com.

2Who this policy applies to

This privacy policy concerns the website aishaa.co.uk: visitors to the website and anyone who contacts us via the website or by email or phone.

Does your organisation use the aishaa platform? Then we process the data in that platform (such as customer conversations and customer profiles of your organisation) on behalf of your organisation, as a processor within the meaning of the GDPR. The data processing agreement and the arrangements with your organisation apply to that, not this policy. More information about the security of the platform can be found at aishaa.co.uk/veiligheid-privacy. If you have questions about how an organisation that uses aishaa handles your data, please contact that organisation.

3Which data we collect

Contact via the contact form, email or phone. If you contact us, we process the data you provide: your name, company name, email address, phone number, the subject and the content of your message.

Demo or introduction. If you request a demo, we use your contact details to schedule and follow up on the appointment.

Technical data. When you visit the website, limited technical data is automatically processed, such as your IP address, browser type and the pages requested. This data sits in server log files and is only used for the security and proper functioning of the website.

4What we use your data for

We use your data for the following purposes, on the following bases:

• Responding to your question or demo request. Basis: the performance of an agreement or of measures prior to entering into one, and our legitimate interest in answering questions from (potential) customers.
• Security and management of the website. Basis: our legitimate interest in a secure and well-functioning website.
• Complying with legal obligations, for example tax retention obligations in a customer relationship. Basis: legal obligation.

We do not use your data for automated decision-making or profiling and we do not sell your data.

5Cookies

aishaa.co.uk uses functional and technical cookies that are necessary for the website to work properly. We place these without consent; they have little or no impact on your privacy.

In addition, we use — only with your consent — analytical cookies from Google Analytics to understand how visitors use our website, so we can improve the site. On your first visit we ask for that consent via the cookie banner. You can adjust or withdraw your choice at any time via our cookie statement, which also contains an up-to-date overview of all cookies on this website. Google may process the data collected with these cookies on servers outside the EEA; the safeguards from article 6 apply.

We do not use marketing or advertising cookies.

6Who we share your data with

We only share your data with parties that help us deliver our services, such as our hosting provider and our email service. With parties that process personal data for us as processors, we conclude a data processing agreement. We also share data if a legal obligation compels us to do so.

We process your data within the European Economic Area (EEA) as much as possible. If data is nevertheless processed outside the EEA, we ensure appropriate safeguards, such as the standard contractual clauses of the European Commission.

7How long we keep your data

We do not keep your data longer than necessary. We keep contact requests for as long as needed to answer your question and complete any follow-up, and after that for a maximum of two years, so we still have the context for a follow-up question. If your organisation becomes a customer, we keep the data belonging to the customer relationship for as long as that relationship lasts, and thereafter for as long as statutory retention obligations apply (for example seven years for administrative records). Server log files are automatically deleted after a short time.

8How we protect your data

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. Think of encrypted connections (HTTPS), access management and security updates. Should a data breach nevertheless occur with risk to data subjects, we will report it to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) and, where necessary, to the data subjects themselves.

9Your rights

You have the right to:

• see which personal data we process about you;
• have incorrect data corrected;
• have your data deleted;
• have the processing restricted;
• object to the processing;
• receive your data in a common format (data portability);
• withdraw previously given consent.

If you wish to exercise any of these rights, please contact us using the details at the bottom of this policy. We will respond to your request within one month. To make sure a request comes from you, we may ask you for additional information to confirm your identity.

If you disagree with how we handle your data, we would like to hear it. You also always have the right to lodge a complaint with the Autoriteit Persoonsgegevens.

10Changes to this policy

We may amend this privacy policy, for example if our website or services change. The current version is always on this page, with the version date at the top.

11Contact