Privacybeleid

1. Inleiding

De IT Afdeling ("we," "our," or "us") operates STRAK, a cloud-based ERP platform. We are committed to protecting your personal data and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

This policy applies to all users of STRAK, including account administrators, team members, and visitors to our marketing website. By using STRAK, you agree to the collection and use of information in accordance with this policy.

2. Gegevens die wij verzamelen

2.1 Gegevens die je zelf verstrekt

We collect information you directly provide when using STRAK:

• Account Information: Name, email address, password, company name, and billing details
• Profile Information: Job title, phone number, profile photo, and other optional profile details
• Business Data: Projects, tasks, time entries, invoices, contacts, and other data you create or upload
• Communications: Messages sent through our support channels or contact forms

2.2 Automatisch verzamelde gegevens

When you access STRAK, we automatically collect:

• Usage Data: Features used, pages visited, time spent, and interaction patterns
• Device Information: IP address, browser type, operating system, and device identifiers
• Location Data: GPS coordinates when using time-tracking features (with your consent)
• Log Data: Access times, error logs, and performance data

2.3 Gegevens van derden

We may receive information from third-party services you connect to STRAK, such as calendar integrations, payment processors, or authentication providers.

3. Hoe wij je gegevens gebruiken

We use your information for the following purposes:

• Service Delivery:To provide, maintain, and improve STRAK's features and functionality
• Account Management: To create and manage your account, process payments, and handle billing
• Communication: To send service updates, security alerts, and respond to your inquiries
• Personalization: To customize your experience and provide relevant features
• Analytics: To understand usage patterns and improve our platform
• Security: To detect, prevent, and address fraud, abuse, and security issues
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

We process your personal data based on legal grounds including contract performance, legitimate interests, legal obligations, and your consent where required.

4. Gegevensopslag en beveiliging

Your data is stored securely using industry-standard practices:

• Infrastructure: Data is hosted on Supabase (PostgreSQL) with servers located in the European Union
• Encryption: Data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Role-based access controls and multi-tenant isolation
• Backups: Regular automated backups with 30-day retention
• Monitoring: Continuous security monitoring and audit logging

While we implement robust security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but will promptly notify you of any data breaches as required by law.

5. Delen van gegevens met derden

We do not sell your personal data. We may share your information with:

• Service Providers: Supabase (database), Vercel (hosting), payment processors (billing)
• Team Members: Data you create is accessible to other members of your organization
• Legal Requirements: When required by law, subpoena, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize sharing

All third-party service providers are contractually obligated to protect your data and use it only for the purposes we specify.

6. Jouw privacyrechten

Under GDPR and Dutch privacy law, you have the following rights:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate data
• Deletion:Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Limit how we process your data
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time (where processing is based on consent)

To exercise these rights, contact us at legal@strak.com. We will respond within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

7. Cookies en tracking

We use cookies and similar tracking technologies to improve your experience. See our Cookie Policy for detailed information about the cookies we use and how to manage your preferences.

8. Bewaartermijnen

We retain your personal data for as long as necessary to provide our services and comply with legal obligations:

• Active Accounts: Data retained while your account is active
• Deleted Accounts: Most data deleted within 30 days of account deletion
• Legal Requirements: Some data retained longer for tax, accounting, or legal purposes (typically 7 years)
• Audit Logs: Security and audit logs retained for 1 year

9. Privacy van kinderen

STRAK is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us and we will delete such information.

10. Wijzigingen in dit beleid

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by email or through the platform. The "Last updated" date at the top indicates when this policy was last revised. Continued use of STRAK after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: