Inventory Alarm Dashboard

dashboard.inventoryalarm.com

Privacy statement

Privacy statement

Inventory Alarm, the developer of this website, is responsible for the processing of personal data on dashboard.inventoryalarm.com as shown in this privacy statement. This statement has been written based on the GDPR privacy statement model from veiliginternetten.nl

The last change of this privacy statement was 6 October 2022.

De Nederlandse versie van deze privacyverklaring vind je hier.

For what purpose and on what basis we process personal data

Inventoryalarm.com processes a number of personal data for the following purpose:

  • To be able to deliver our service to you: a Lightspeed eCom SaaS app that works well.

Personal data that we process

The Inventory Alarm dashboard processes the following data of the webshop manager, for the following purposes:

  • IP address. Every time you view a page on this site, it is retrieved from a web server where the IP address is sent to the server, this is necessary in the communication between the browser and the web server. This is not logged in a webserver log file, which means that this information is not saved on our server.
  • First name and last name of the webshop manager. We use this for the header of emails (such as the welcome email) that are sent to the webshop manager. Also, the first name and last name are shown at the top right of the dashboard when you are logged in.
  • Email address as entered by webshop manager. We use this for addressing emails (such as the stock alert email) that are sent to the webshop manager. When the app is installed, the email address is passed on to Inventory Alarm via the Lightspeed platform, the user can change this during the app installation.
  • Password hash of the entered password for the dashboard. During the installation of the app, the user can enter it. Strict password rules are used for this. The password is of course stored encrypted as hash, using best practices such as a long and unique user-defined password salt for encryption. So the password itself is not stored, just the hash mentioned.

For payment purposes Inventory Alarm processes the following data, via our payment provider mollie.com:

  • Name, e-mail addres and company name of the billing contact person.
  • mollie.com processes IBAN (or credit card number) and account holder name when asking for SEPA direct debit mandate (or credit card mandate). However this data is not processed by Inventory Alarm.

For creating invoices, Inventory Alarm processes the following data, via our provider Chargebee:

  • Company name, address and VAT id (optional).
  • Name, e-mail addres and phone number (optional) of the billing contact person.
  • Chargebee processes IBAN (or credit card number) and account holder name when asking for SEPA direct debit mandate (or credit card mandate). However this data is not processed by Inventory Alarm.
  • eCurring will also be used for invoice creation until December 31, 2022, which is currently being phased out. eCurring processes the same data as mentioned for Chargebee.

Inventory Alarm dashboard processes a number of personal data of the webshop visitor for the following purposes. We advise webshop owners who use Inventory Alarm, to include the following two points in the privacy statement of their webshop:

  • The Inventory Alarm dashboard processes the email address of the visitor to the webshop on which Inventory Alarm is installed, along with the article number for which it wants to receive the email, so that it will be notified when the item is in stock again. This email address is of course only recorded after entering the email address in the Inventory Alarm pop-up.
  • IP address of the visitor of the website on which Inventory Alarm is installed. Whenever it visits a web page, the popup scripts are loaded, sending the IP address to the server. Inventory Alarm has no web server logging activated, so the IP addresses are not logged.

Special and / or sensitive personal data that we process

The website does not intend to collect data about users who are younger than 16 years of age, unless they have permission from parents or guardians. However, we can not check if a visitor is older than 16. We encourage parents to be involved in the online activities of their children, in order to prevent data about children being collected without parental consent. If you are convinced that we have collected personal information about a minor without this permission, please contact us via info@inventoryalarm.com

Automated decision-making

Inventory Alarm does not take decisions based on automated processing on matters that can have (significant) consequences for people.

How long we store personal data

We do not store your personal data longer than is strictly necessary to achieve the purposes for which your data is collected. If legal regulations apply to the storage, the personal data will not be kept longer than prescribed by law.

Sharing personal data with third parties

We do not sell data from you to third parties, and will only provide information to third parties if this is necessary for the execution of our agreement with you or to comply with a legal obligation. With companies that process your data in our assignment, we conclude a processor agreement to ensure the same level of security and confidentiality of your data. Inventory Alarm remains responsible for these processing operations.

For a complete overview of sub-processors, please download the List of data sub-processors (pdf, dutch). Also for some subprocessors, additional information is provided below.

The dashboard.inventoryalarm.com web application and its data is hosted at Microsoft Azure, Region: West Europe. This data center is located in The Netherlands (EU). These hosting services are offered by Microsoft Ireland Operations Ltd, a Microsoft subsidiary located in Ireland (EU).

Information reguard Azure hosting and GDPR compliance can be found here: Licensing terms overview links to the Online Services Data Protection Addendum (DPA) - .docx document. A Data Protection Addendum is the same as a Data Processor Agreement.

Azure hosting and data storage services are provided to Inventory Alarm by Microsoft Ireland Operations Ltd, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland, VAT ID: IE8256796U. This company acts as "Seller of Record", which means a EU based company provides the services to Inventory Alarm, and the service is implemented in EU as well (Region West Europe Azure servers are in Amsterdam).

Data in Azure is encrypted in transport (browser <-> webapplication <-> database) as well as in rest using encryption. By using the services of a EU based company with data storage in the EU, sufficient measures are in place so that data is not passed to non-EU countries such as the US. Read more about Data management at Microsoft and Microsoft's statement regarding Privacy Shield.

The email servers we use to receive, read and manually send or reply to email correspondence, for example if you ask us a question by email, are provided by TransIP, the TransIP company and the servers are located in the Netherlands (EU).

For automated sending of Inventory Alarm emails we use Rapidmail, a German e-mail provider hosted in Germany so all data is stored in EU. SendGrid has been phased out per 10 October 2020. Customers that used Inventory Alarm before 10 October 2020 have been requested to update their settings to make the switch to Rapidmail. Twilio Sendgrid uses Standard Contractual Clauses.

Cookies, or similar techniques, that we use

This website uses functional cookies to determine whether the banner at the bottom of the page was displayed before. This banner shows information about the privacy policy. Otherwise, the banner would always be displayed.

View, modify or delete data

You have the right to view, correct or delete your personal data. You also have the right to withdraw your consent to the data processing or to object to the processing of your personal data by InventoryAlarm.com and you have the right to data portability. You can send a request for inspection, correction, deletion, data transfer of your personal data or request for withdrawal of your consent or objection to the processing of your personal data to info@inventoryalarm.com

We respond as quickly as possible, but within four weeks, to your request.

How we protect personal data

We take the protection of your data seriously and take appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. If you feel that your details are not properly secured or there are indications of abuse, please contact us at info@inventoryalarm.com

Contact details

Inventory Alarm
Goeman Borgesiuslaan 77
3515 ET Utrecht
The Netherlands
+31840038837
www.inventoryalarm.com
info@inventoryalarm.com