Privacy statement

Who we are

This website belongs to BetterSteps ([STATUTAIRE NAAM]), [ADRES], registered with the Dutch Chamber of Commerce (KvK [NUMMER]). We are responsible for what happens to your data through this website. Under the GDPR, this makes us the controller.

Do you have a question about privacy? Email us at privacy@[domein].

In short

• We only ask for personal data when you request a demo yourself.
• This website does not place any cookies and does not use analytics tools or advertising networks.
• We do not load any scripts, fonts or other files from other parties.
• We do not sell your data and do not share it with other parties for marketing.
• We delete demo requests automatically after 12 months.

When you request a demo

You can request a demo with the form on the Demo page and at the bottom of the homepage. We ask for:

• your name;
• the name of your organisation;
• your work email address;
• the type of organisation, if you choose one;
• how many participants you expect, if you choose an option;
• your message, if you write one.

We also store when you made the request, which form you used (the homepage or the Demo page) and in which language. That way, we can reply in the right language.

We use these details to respond to your request, schedule the demo, prepare it and stay in touch with you about your request. After you submit the form, you receive a confirmation by email, and our team receives a notification by email.

To prevent spam, the form has a hidden field and a minimum time to fill it in. If a request appears to come from a computer program, we do not store anything.

Why we are allowed to do this

You ask us for a demo yourself. We use your details for steps you take before possibly entering into an agreement with us (Article 6(1)(b) GDPR). We also have a legitimate interest in responding to requests and showing our platform to organisations that ask for it (Article 6(1)(f) GDPR).

You are not required to fill in the form. Without your name, organisation and email address, however, we cannot contact you.

When you visit the website

You can visit this website without telling us anything about yourself. We do not place cookies and do not store anything in your browser to recognise or track you. You can read more about this on the Cookies page.

To show the website and keep it secure, our hosting provider processes your IP address and technical details about your visit, such as the page you request, the time and the type of browser. We only use these server logs for security, to fix faults and to prevent misuse. We keep them for [LOGBEWAARTERMIJN].

When you submit the demo form, we also use your IP address to limit how many requests come from a single address. We do not store that IP address with your request. We only keep it in a counter that expires after 10 minutes.

We do not use analytics tools, advertising networks, social media buttons or embedded videos or maps from other parties. The fonts are hosted on our own server, so your browser does not connect to other parties such as Google.

We do this on the basis of our legitimate interest in a secure website that works properly (Article 6(1)(f) GDPR).

Who can see your data

Only the BetterSteps staff who handle demo requests and manage the platform can see your request.

We work with a few service providers. They only process your data on our instructions and under a data processing agreement we have made with them:

• [HOSTINGPARTIJ]: hosting of the website, our servers and the database;
• [E-MAILDIENST]: sending the confirmation to you and the notification to our team.

We do not sell your data and do not share it with other parties for marketing. Only if the law requires us to may we have to provide data to an authority.

Where your data is stored

Demo requests are stored in a database in the European Union ([REGIO]). Should a service provider ever process data outside the European Economic Area, this will only happen with the safeguards the GDPR requires. We will then update this statement.

How long we keep your data

• Demo requests: we delete them automatically 12 months after we receive them.
• Emails about your request, such as the notification to our team: [BEWAARTERMIJN E-MAIL].
• Server logs: [LOGBEWAARTERMIJN].

Would you like us to delete your request sooner? You can ask us to (see Your rights).

How we protect your data

The website uses a secure connection (https). The form sends your details to our platform through our own server. Only staff who need to for their work can see demo requests. You can read how we secure the platform on the Security page.

Your rights

Under the GDPR, you have the following rights:

• Access: you may ask which data we hold about you.
• Rectification: if your data is incorrect, you may ask us to correct it.
• Erasure: you may ask us to delete your data.
• Restriction: you may ask us to temporarily limit what we do with your data, for example while we look into your request.
• Objection: you may object when we use your data on the basis of our legitimate interest.
• Portability: you may receive your data in a common file format, so that you can pass it on to someone else.

Would you like to exercise one of these rights? Email us at privacy@[domein]. We will respond within one month. Sometimes we first ask you to show that the data is yours, so that we do not give it to the wrong person.

Making a complaint

Are you unhappy with how we handle your data? Please let us know first at privacy@[domein]. You always have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), the supervisory authority in the Netherlands.

The app and the dashboard

This statement is about the website. The platform itself, with the app and the dashboard, works differently. Organisations use BetterSteps to support their participants. The app and the dashboard then contain participants' data, including health data.

The organisation that uses the platform is responsible for that data. BetterSteps only processes it on behalf of that organisation, as a processor, under a data processing agreement. The privacy statement of that organisation therefore applies. Do you have a question about your data in the app? Please contact the organisation that supports you first.

You can read how we protect the data in the platform on the Security page.

If this statement changes

We update this statement when something changes, for example when we start working with a new service provider. The date at the top of this page shows when we last updated it.