Privacy Statement

Taxxor B.V. (hereinafter “Taxxor”, “we” or “us”) is a private limited company and its purpose is to optimise the (financial) reporting process of medium and large companies, using intelligent software solutions and high-quality consultancy. In this context Taxxor receives and processes personal data as referred to in the General Data Protection Regulation (GDPR). In this document, Taxxor informs you, in accordance with the GDPR for which purposes these data will be processed, the legal grounds for data processing and how you can make use of your rights under the GDPR.

This privacy statement is dated 14 September 2023. We may amend it unilaterally; the current version is always published on this page.

1. Personal Data

Personal data is any information relating to an identified or identifiable natural person. Examples of personal data are your name, e-mail address, telephone number, etc. We may obtain personal data either because you provide it to us, because it can be accessed from a public source or because we receive it from a third party.

Personal data that we obtain from a source other than you (public source or third party), if any, may include the following categories of personal data:

• basic information as recorded in public available sources;
• data relating to your identity;
• other public data that may be useful for the purposes as set out in this privacy statement.

We will only request data that can be useful in carrying out one or more of the purposes listed below.

2. Purposes, legal grounds and retention periods

We process the personal data we receive for the purposes below. Each purpose is stated together with the legal ground we rely on.

• entering into and maintaining a business relationship with you — performance of a contract to which you are a party, or our legitimate interest in maintaining client contact;
• providing user accounts for our services — performance of a contract to which you are a party;
• handling a demo or contact request you submit through the form on this website — performance of a contract, or your consent;
• marketing activities and alerting you or your organisation to news, developments and events that may be of interest to you — your consent, or our legitimate interest in direct marketing towards existing clients;
• securing, technically managing and statistically analysing this website on the basis of server log files, which record the IP address, browser type, requested page and time of each visit — our legitimate interest in a secure, properly functioning website and in insight into how it is used. These log files are deleted automatically after fifteen months;
• complying with legal obligations, for example in the area of taxation — compliance with a legal obligation.

Where we rely on a legitimate interest, Taxxor weighs that interest against your interests, rights and freedoms. You may object to processing on that ground; see section 5.

We do not retain personal data longer than is necessary for the purpose for which it was collected, and we observe statutory retention obligations, including the seven-year retention period under Dutch tax law.

3. Recipients of personal data

We will only share your personal data to the extent necessary for the purposes set out above. We may share personal data with:

• parties engaged by Taxxor to provide support services, for example ICT suppliers, the accountant, or other service providers;
• judicial authorities and/or regulators.

Taxxor concludes a data processing agreement with every party that processes personal data on our instructions. At present these are:

• Amazon Web Services (AWS) — hosting for the platform and for this website, in the Frankfurt region (Germany). AWS also processes the data submitted through the demo form;
• Microsoft — the business mail environment. A request submitted through the form is forwarded to a Microsoft inbox and handled from there;
• Cloudflare — for Turnstile only, the security check on the demo form that blocks automated submissions.

We do not engage a new subprocessor for the platform without the client’s prior written consent. No third-party analytics, statistics or advertising services run on this website.

4. Transfers outside the European Economic Area

The platform and this website run in the AWS Frankfurt region (Germany). Processing of a request submitted through the demo form also takes place inside the European Union, so that processing involves no transfer outside the EEA.

Microsoft and Cloudflare are US companies. For the mail environment and for Turnstile, transfer to the United States therefore cannot be ruled out, even where storage sits inside the European Union. For those transfers Taxxor relies on the standard contractual clauses adopted by the European Commission, as included in the data processing agreement with the party concerned. Where a provider also participates in the EU-US Data Privacy Framework, that framework applies in addition, not instead.

We do not sell personal data, and we do not share it with parties other than those named above.

5. Your rights

Under the GDPR, you have a number of rights in relation to your personal data.

You have the right to object at any time to processing of your personal data which is based on the legitimate interest of Taxxor. Aside from your right to object to processing, you have a number of additional rights in relation to your personal data pursuant to the GDPR, namely:

• the right to request access to the personal data: you have the right to obtain confirmation as to which of your personal data is being processed and, if so, access to such data;
• the right to request rectification of the personal data: you have the right to ask for rectification of inaccurate personal data;
• the right to request erasure of the personal data: you have the right to ask us to erase your personal data;
• the right to request restriction of processing of your personal data; for example, if certain data are inaccurate in your opinion;
• the right of data portability: under certain circumstances, you have the right to ask us to transfer the personal data you provided to you or another party;
• the right to lodge a complaint: you have the right to lodge a complaint to us or with a supervisory authority;
• where processing is based on your consent, you have the right to withdraw the consent you provided at any time, without affecting the lawfulness of any processing based on consent before your withdrawal.

You may exercise your rights by notifying us via the contact details set out below. We will respond to your request as soon as possible and in any event within one month after receiving it. If you exercise the right to rectification, erasure and/or restriction of processing, Taxxor will use its best efforts to inform each recipient to whom the personal data have been disclosed. Taxxor shall inform you about those recipients at your request.

If you are not satisfied with the way we handle your personal data, you may lodge a complaint with the Autoriteit Persoonsgegevens, the Dutch supervisory authority (autoriteitpersoonsgegevens.nl).

Providing your personal data is neither a statutory nor a contractual requirement. If you do not complete the demo form on this website, however, we cannot process your request.

Taxxor does not take decisions based solely on automated processing, and does not carry out profiling, within the meaning of Article 22 GDPR.

6. Contact details

Taxxor may collect data in connection with the use of Taxxor’s services or your visit to our website as described in this privacy statement. If you have any questions or wish to exercise one of your rights as stated above, please contact us via the following contact details:

7. Personal data security

Taxxor has taken appropriate technical and organisational measures to protect personal data against loss or against any form of unlawful processing.

8. Cookies

This website sets no tracking, analytics or advertising cookies. No statistics service runs in your browser, neither Taxxor’s own nor a third party’s; visit statistics are compiled solely from the server log files described in section 2.

What the website does store is listed here in full:

• tx-cookie-consent — the choice you make in the cookie banner. Stored by Taxxor itself, in your browser’s local storage rather than in a cookie, and used only to respect that choice and demonstrate it. It stays until you clear this site’s data in your browser.
• tx-lang — the language you pick with the NL/EN switcher. Stored by Taxxor itself, in your browser’s local storage rather than in a cookie, and used only to open this site in that language the next time you visit it. It holds nothing but “nl” or “en”, and it stays until you clear this site’s data in your browser.
• Cloudflare Turnstile — on the demo form page only. This Cloudflare security check blocks automated submissions and may store data in your browser to do so. Turnstile is designed not to track visitors across websites and sets no advertising cookies.

Because the first two record only your own preferences and the third is necessary to protect the form against abuse, there is no non-essential category for which we ask consent. You can change your choice at any time through Cookie settings at the foot of every page, and delete the stored data through your browser settings. The website stays fully accessible either way. The rules on this are set out in the GDPR and in the ePrivacy Directive.