Privacy Statement

Effective date: May 17, 2023

This is the privacy statement of R. Buijs operating under the name InboxGPT, hereinafter: InboxGPT. InboxGPT is registered at the Dutch Chamber of Commerce with number 20145923 and is located at Palmstraat 40 (3572TD) in Utrecht (The Netherlands). This document explains how InboxGPT handles the processing of your personal data. InboxGPT takes the greatest possible care when processing your personal data.

Obtaining personal data

If you use the services of InboxGPT, you provide a number of personal data to InboxGPT yourself, or personal data is obtained from you in the context of the agreement. Personal data is understood to mean all data relating to an identified or identifiable natural person.

Categories of personal data

InboxGPT processes the following categories of personal data:

• Contact data, name and address, including location data, telephone number, e-mail address;
• Company details, including VAT number and Chamber of Commerce number;
• Account information, including your password and username;
• IP address;
• user data;
• Other personal data provided by you.

Purpose of the processing

The purpose of the personal data processed by InboxGPT is to:

• contact you to inform you about the services you have purchased and their implementation;
• be able to perform its services;
• improve its services;
• be able to make payments;
• be able to comply with legal obligations;
• be able to make marketing and communication expressions, including improving the website by analyzing visitor behavior on the website;
• be able to send newsletters;
• exchange data with third parties for the performance of the service, insofar as this is necessary.

Basis of processing

The processing of personal data is only possible on the basis of the following principles: (i) legal obligation, (ii) execution of the agreement, (iii) obtained (explicit) consent from the data subjects, and (iv) legitimate interest. Personal data is processed when InboxGPT provides its services. InboxGPT only processes data that InboxGPT deems necessary for (improving) its services and handles the (personal) data that it has collected about you and your use of the services with care. The basis for processing this data is the agreement you have entered into with InboxGPT. Your personal data can also be processed by visiting the website www.boei.help provided you have given permission.

Necessity of processing

The processing of your personal data is necessary to be able to carry out the service. The services that InboxGPT offers cannot be fully performed without the processing of your personal data. If your explicit permission is required for specific purposes with regard to the personal data, you must give permission for this separately.

Automated decision-making

There is no automated decision-making.

Retention period

The personal data processed by InboxGPT are stored in accordance with the relevant laws and regulations. If a longer retention period is necessary on the basis of legislation or regulations, the personal data will be kept longer in accordance with these requirements. All (obtained) personal data will not be kept longer than strictly necessary.

Processing by third parties

InboxGPT only shares personal data with third parties if this is strictly necessary for the execution of an agreement and to comply with relevant laws and regulations. No personal data is sold. InboxGPT may have a legal obligation to share personal data with third parties. If personal data is shared with third parties, processing agreements are therefore concluded. The third parties with whom personal data is shared are:

• The Payment Provider, for the purpose of executing an agreement. The categories of personal data that are processed are contact-, name- and address details.
• The Bookkeeper, for the purpose of executing an agreement. The categories of personal data that are processed are contact-, name- and address data and financial data.
• Software suppliers, for the purpose of executing the agreement. The categories of personal data that are processed are the contact-, name- and address details.
• Website administrator, for the purpose of executing the agreement. The categories of personal data that are processed are the contact-, name- and address details.
• Third parties engaged for the performance of the agreement. The categories of personal data that are processed are the contact-, name- and address details.

Security of Personal Data

InboxGPT takes the protection of your personal data seriously and takes the protection of your personal data seriously, taking into account the state of the art, implementation costs, as well as the nature, scope, context and the processing purposes and the risks to the rights and freedoms varying in likelihood and seriousness. persons, appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

Under 16 years old?

If you are a minor, i.e. younger than 16, you may only give permission for the processing of your personal data with the permission of one of your parents or legal guardian. It is then important that your parent(s) or guardian read this statement. They can also exercise the rights you have with regard to the personal data you leave with us, such as the right to object to the (further) processing of your personal data or the right to access and correct your data.

E-mail newsletter and other marketing mails

You can register via the website for a newsletter and/or for other commercial offers. When you register, InboxGPT requests permission to process your email address for the purpose of sending you marketing emails containing the latest information about products and services, special offers and marketing campaigns. You will only receive marketing emails if you have given your consent.

Your consent also includes your consent that InboxGPT may personalize the content of marketing emails in accordance with your needs and interests based on any user profile created for you.

You can withdraw your consent to receiving marketing emails at any time by clicking "unsubscribe" at the bottom of the marketing email. Withdrawing consent does not affect the lawfulness of processing carried out prior to the withdrawal of consent.

Third parties

This privacy statement does not apply to websites of third parties that are connected to this website by means of links. InboxGPT cannot guarantee that these third parties will handle your personal data in a reliable or secure manner. InboxGPT recommends that you read the privacy statement of these websites before using these websites.

Rights of data subjects

As a data subject you have the following rights:

• Right of access;
  As a data subject, you have the right to obtain a definitive answer as to whether or not your personal data is being processed and, if so, to inspect the processing thereof.
• Right to rectification;
  You have the right to obtain rectification and completion of incorrect data.
• Right to erasure;
  A data subject must obtain erasure of personal data concerning him/her without undue delay.
• Right to restriction of processing;
  As a data subject, you have the right to restrict the processing of your personal data. Please contact InboxGPT for this.
• Right to data portability;
  A data subject has the right to obtain the personal data concerning him that he has provided to InboxGPT in a structured, common and machine-readable form in order to possibly transfer this personal data to a third party. A data subject can also instruct InboxGPT to transfer this data directly to a third party.
• Right to object;
  The data subject has the right to object at any time, on grounds relating to his particular situation, to the processing of personal data concerning him/her, including profiling based on those provisions. InboxGPT will cease processing the personal data unless there are compelling legitimate grounds for the processing that outweigh the interests, freedoms and rights of the data subject related to the exercise, establishment or defense of legal claims.

Complaint

If you have a complaint about the way in which InboxGPT handles your personal data, or if you wish to exercise one of the above rights, you can contact us via the website or by e-mail at support@inboxgpt.ai. To ensure that you wish to exercise a right, InboxGPT asks you to enclose a copy of your proof of identity. You can black out your passport photo and MRZ (strip with numbers at the bottom) to protect your privacy. InboxGPT will respond to your request as soon as possible, but at the latest within 4 weeks. You can also submit a complaint to the Dutch Data Protection Authority. This is the competent enforcement body. You can contact us via this link: https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons.

Changes to the Privacy Statement

InboxGPT can change the privacy statement at any time. The most recent version is published on the website. Therefore, always keep an eye on the website for the most recent version. If the new privacy statement has consequences for the way in which InboxGPT processes already collected data relating to you, InboxGPT will inform you by e-mail.