Inventory Alarm, the developer of this website, is responsible for the processing of personal data on dashboard.inventoryalarm.com as shown in this privacy statement. This statement has been written based on the GDPR privacy statement model from veiliginternetten.nl
The last change of this privacy statement was 11 September 2020.
De Nederlandse versie van deze privacyverklaring vind je hier.
Inventoryalarm.com processes a number of personal data for the following purpose:
The Inventory Alarm dashboard processes the following data of the webshop manager, for the following purposes:
Inventory Alarm dashboard processes a number of personal data of the webshop visitor for the following purposes. We advise webshop owners who use Inventory Alarm, to include the following two points in the privacy statement of their webshop:
The website does not intend to collect data about users who are younger than 16 years of age, unless they have permission from parents or guardians. However, we can not check if a visitor is older than 16. We encourage parents to be involved in the online activities of their children, in order to prevent data about children being collected without parental consent. If you are convinced that we have collected personal information about a minor without this permission, please contact us via email@example.com
Inventory Alarm does not take decisions based on automated processing on matters that can have (significant) consequences for people.
We do not store your personal data longer than is strictly necessary to achieve the purposes for which your data is collected. If legal regulations apply to the storage, the personal data will not be kept longer than prescribed by law.
We do not sell data from you to third parties and will only provide this information if this is necessary for the execution of our agreement with you or to comply with a legal obligation. With companies that process your data in our assignment, we conclude a processor agreement to ensure the same level of security and confidentiality of your data. Inventory Alarm remains responsible for these processing operations.
The dashboard.inventoryalarm.com web application and its data is hosted at Microsoft Azure, Region: West Europe. This data center is located in The Netherlands (EU). These hosting services are offered by Microsoft Ireland Operations Ltd, a Microsoft subsidiary located in Ireland (EU).
Information reguard Azure hosting and GDPR compliance can be found here: Licensing terms overview links to the Online Services Data Protection Addendum (DPA) - .docx document. A Data Protection Addendum is the same as a Data Processor Agreement.
Azure hosting and data storage services are provided to Inventory Alarm by Microsoft Ireland Operations Ltd, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland, VAT ID: IE8256796U. This company acts as "Seller of Record", which means a EU based company provides the services to Inventory Alarm, and the service is implemented in EU as well (Region West Europe Azure servers are in Amsterdam).
Data in Azure is encrypted in transport (browser <-> webapplication <-> database) as well as in rest using encryption. By using the services of a EU based company with data storage in the EU, sufficient measures are in place so that data is not passed to non-EU countries such as the US. Read more about Data management at Microsoft and Microsoft's statement regarding Privacy Shield.
The email servers we use to receive, read and manually send or reply to email correspondence, for example if you ask us a question by email, are provided by TransIP, the TransIP company and the servers are located in the Netherlands (EU).
For automated sending of Inventory Alarm emails we use SendGrid. SendGrid is EU-US Privacy Shield certified. Given the recent developments regarding this privacy shield we have asked SendGrid for a written statement regarding the use of SendGrid within the EU. Depending the outcome of this, we might replace SendGrid with a EU alternative in the near future.
Update 11 August 2020: SendGrid wrote a public statement regarding all Twilio services (Sendgrid is a Twilio service), refers to Twilio's Binding Corporate Rules and Twilio's Standard Contractual Clauses (§ 14.4). Also, Sendgrid tells us they are writing an updated version of their Privacy Shield post. We have asked Sendgrid a number of follow-up questions and are waiting their response.
Since 7 September 2020, as part of a pilot, Inventory Alarm sends some of the stock warning e-mails to webshop owners with Flowmailer, a Dutch company with servers in the Netherlands, and Mailjet, een French company with servers in France.
You have the right to view, correct or delete your personal data. You also have the right to withdraw your consent to the data processing or to object to the processing of your personal data by InventoryAlarm.com and you have the right to data portability. You can send a request for inspection, correction, deletion, data transfer of your personal data or request for withdrawal of your consent or objection to the processing of your personal data to firstname.lastname@example.org
We respond as quickly as possible, but within four weeks, to your request.
We take the protection of your data seriously and take appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. If you feel that your details are not properly secured or there are indications of abuse, please contact us at email@example.com
Goeman Borgesiuslaan 77
3515 ET Utrecht