Data processing agreement
This data processing agreement is part of the terms and conditions of ZZPboek. You accept it with the same checkbox at signup. The Dutch version prevails.
1. Parties and roles
- You (the user) are the controller of the personal data in your administration.
- Serbo Solutions, Frederik Hendrikstraat 120-2, 1052 JC Amsterdam, the Netherlands, Chamber of Commerce (KvK) 96481323, e-mail support@zzpboek.nl, is the processor: we process that data only for you.
2. Subject and duration
We process personal data to provide ZZPboek. This agreement runs as long as your account exists and until the data is deleted.
3. Which data and whose
- Data: names, addresses, e-mail addresses, IBANs and VAT numbers of your clients, suppliers and contact persons, and the amounts and descriptions on invoices, receipts and bank transactions.
- Data subjects: your clients, suppliers and their contact persons.
- Purpose: keeping your administration and preparing your tax returns.
4. Instructions
- We process the data only on your instructions. Using the app is that instruction.
- We do not use the data for our own purposes.
5. Confidentiality
Everyone on our side with access to the data must keep it confidential.
6. Security
We take appropriate technical and organisational measures: encrypted connections, separation of data per user, encrypted backups and limited access for administration.
7. Sub-processors
- You consent to the sub-processors listed in the privacy statement.
- We announce a new sub-processor at least 30 days in advance. If you disagree, you can cancel.
- We impose the same duties on sub-processors as in this agreement.
- We remain fully liable to you for the performance of their obligations by our sub-processors.
8. Data breaches
If we discover a data breach that affects your data, we report it to you without undue delay and at the latest within 48 hours. You decide on a notification to the Autoriteit Persoonsgegevens and to data subjects; we help you with it.
9. Help with data subject rights
If someone asks to view, correct or delete their data, the app helps you: you can change, delete and export data yourself.
Where reasonably necessary we also help you with data protection impact assessments (DPIAs) and consultation with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).
10. Audit
You may check whether we comply with this agreement. We give you the information you reasonably need for that.
11. End
After your account ends you can still export your data. After that we delete it, as described in the privacy statement.
12. Liability
The terms and conditions govern liability.