When you visit our website or use one of our services, we collect personal data from you. We consider it important to respect and protect your privacy as much as possible. Therefore, we handle your personal data carefully and are transparent about their use. In this Peppol privacy policy, we explain what data we collect and for what purposes we do so.
1. Who is who?
When you read ‘you', ‘your' in this privacy policy, we mean you as a customer who uses our services, or as a visitor to our website.
When you read ‘we', ‘us', or ‘our', we mean Solventis B.V. as the owner of Peppol.now, located at Gondelstraat 36, 2586 ES, in The Hague. Solventis B.V. is registered with the Chamber of Commerce under number 94449503.
2. Who is responsible for your data?
Under privacy legislation, we are the ‘controller' for collecting personal data from our customers and website visitors. This privacy policy only applies to that personal data. You are responsible for collecting personal data from your customers.
3. What data do we keep and why?
What personal data we collect and the reason for this depends on the situation. Below we describe per situation what we collect and why.
a. When you visit our website
We collect data about visitors to our website, for example how many visitors there have been and from which page they were referred. What data we collect depends on what information your browser sends. This can be information about your device, your operating system, or the time you visited our website. We use this data for our website statistics and to make our website more user-friendly. We do this based on the business interest to tailor our website as well as possible to visitors. For these analyses, we place cookies. In our cookie policy, you can read which cookies these are.
b. When you contact us
When you contact us via our contact form or when you send us an email, we record your email address, first and last name. Sometimes we also record which web browser, which mobile device and/or which API client you use, and from which company you contact us. We use this data to answer your questions. This is part of the execution of our agreement.
Note: Never send unsolicited sensitive personal data, such as your password or full credit card number. If you do this, we will notify you, delete your message and not process your message.
c. When you use the services of Peppol.now
We find it important to make our services align as well as possible with the wishes of our users. We are therefore constantly working to improve our services. For this, we analyze data about our users. This data is anonymized and can only be traced back to individuals to a very limited extent. This information helps us to:
We also use these analyses for writing blog posts or other marketing or communication expressions. We then do not present data that can be traced back to individual users, but we do present trends and statistics about large groups of users.
Furthermore, we use data on a limited scale, for example a small collection of invoices, to improve our algorithms. We have an interest in this and have taken additional safeguards so that this data is handled carefully.
d. When you place a review on our website
We are very happy with reviews about Peppol.now. Via our website, you can leave a review. We then store this in our database and publish it on our website after your consent. We only record your review, your gender, and your name. If you also provide your company name, we also store that. Furthermore, we forward reviews about Peppol.now to partners, who make the reviews findable for search engines and comparison websites.
e. Other purposes
Finally, we use your email address, business address and/or name to invoice, to collect claims, to investigate your creditworthiness and for our accounting. We also use this data to handle any complaints and/or disputes with you. We do this to properly execute our agreement.
4. How have we secured your data?
To secure your personal data, we have taken appropriate technical and organizational measures. We have based the choice of these measures on the available technology, the implementation costs, the type of personal data we process from you and the risks associated with it. For example, our website has a TLS certificate and we use a firewall to prevent abuse.
In addition, we have a responsible disclosure policy. This means that – in addition to the fact that we actively search for vulnerabilities in our system ourselves – we are also open to reports of vulnerabilities discovered by others. We resolve these reported vulnerabilities as soon as possible. You can read more about this at https://www.peppol.nu/security/.
5. With whom do we share your data? From whom do we receive data?
Within Solventis B.V., various people have access to your data. These can only be employees of Solventis B.V. who need the data for the performance of their function.
We share as few personal data as possible with others. We will never sell or rent your personal data. We only share your data:
We may share your personal data with our partners, who provide certain services for us (legally: processors). These partners may collect or use your personal data on our behalf. Which partners these are, you can read at: https://www.peppol.nu/partners/. We have made good agreements with these partners about the confidentiality and security of your personal data. Some partners are located outside the European Union or the European Economic Area. With these parties, we have made good agreements about the security and confidentiality of your personal data, or we have concluded additional security measures or Standard Contractual Clauses.
Note: The Peppol.now website contains various links to websites of other companies and institutions. Solventis B.V. is not responsible for compliance with privacy legislation by these companies.
6. How long do we keep your data?
We do not keep your personal data longer than necessary for the purpose for which we collected it. Sometimes the law requires us to keep data for a certain period. For example, we must keep invoices, containing your personal data, for 10 years for the Tax Authority. We comply with these legal terms.
Furthermore, we adhere to the following terms:
7. What rights do you have regarding your privacy?
According to privacy legislation, you have a number of rights. You can ask us to:
You can also object to the collection of your personal data.
If you have given us permission to process certain data from you, you can always withdraw that permission. After withdrawing your consent, we delete your data. We may possibly refrain from this if we also need your data for another purpose, for which no consent is required. In that case, we keep your data for that purpose.
8. How can you exercise the above rights?
If you want to exercise your rights, you can email us at support@peppol.now. Or you can send a letter to: Solventis B.V. attn. Peppol.now, Gondelstraat 36, 2586 ES The Hague. Before we process your request, we may ask you to identify yourself. After that, you will receive a response from us within one month. In certain cases, we may refuse your request in whole or in part. We will then clearly explain why we do so.
9. What can you do if you have a privacy complaint?
If you have a complaint about how we handle your personal data, we ask you to first report this complaint to us at support@peppol.nu. You can do this, for example, if you suspect that your data has been misused, or that there has been a data breach. We will then work with you to find a solution.
In addition, you always have the right to file a complaint with the Personal Data Authority. You can do this on the website www.autoriteitpersoonsgegevens.nl. (opens in new tab)
10. What happens if we change this policy?
We may occasionally change this privacy policy. We do this, for example, if we want to collect more or different data from you. If we change the policy, we will always let you know well in advance by email or via our website.
Do you have any questions? Feel free to ask them at support@peppol.nu. We strive to respond within one working day.
Version 1, January 2025
