Privacy Statement Ockto
Ockto appreciates and kindly thanks you for your interest in its products and services, for visiting and using our websites, and for using our app. Your privacy is one of our key concerns and we want you to feel comfortable using our services. We take due care and pay special attention to the protection of your privacy when processing your personal data during our operational processes. All personal data collected when people visit our websites are processed in compliance with the statutory regulations prevailing in the Netherlands.
The use of Ockto, the Ockto app and your details
When a third-party organisation offers you the option to use Ockto and the Ockto app, the organisation (hereafter called the Provider) can send your IP address to the Ockto app from their own website or from the Ockto Connect website. When this is done, your IP address will only be used to synchronise the session on this website with the session in the Ockto app. After closing the Ockto app, Ockto deletes all data – including your IP address.
You use the Ockto app to collect personal data and information and forward them via an automated method to the Provider with whom you are in contact. We only disclose the collected details to the Provider after your explicit consent. The Provider receiving the personal data is only allowed to use your data for the purpose for which it was collected and for which you have given your consent.
During a session, Ockto collects information about how the session progresses. Should any irregularities or issues arise, we can use the acquired information to analyse and solve the respective irregularities or issues. This is all done to improve the user experience and to secure and protect (your details in) the app.
When applicable, you compile information that is accessible via MijnOverheid. Your MijnOverheid environment also includes the personal data of your children, parents, and (ex-)partners. Ockto kindly refers you to the privacy statement and the frequently asked questions page on the MijnOverheid website for more information about this content and the way details are processed. Ockto has no influence on the personal data and information processed by MijnOverheid. Ockto is aware of the fact that data and information can refer to third parties and will ignore this whenever possible.
Ockto uses the data you collect to prepare a Data Model in which we enter all information and details as requested by the Provider. We only use the information we need. Apart from that, the Provider may also use what is known as source data. This means that they request your data in the format as it is provided by the sources consulted. It is possible that the Provider requesting this source data ultimately receives more information than what is included in the Data Model. Ockto always reminds the Provider to take the required and responsible actions and to only use the details and information necessary for their processing activities.
During the time between when you collect your personal data with the Ockto app and the moment this data is forwarded to the Provider, Ockto will store your details. After Ockto has sent the personal data to the Provider and the transaction has been completed, the personal data is immediately deleted. Your personal data will also be deleted when you close the Ockto app, shut off your phone, or when you do not allow Ockto to forward the collected personal data to the Provider.
If your Provider uses Ockto Connect and the Ockto Connect website, Ockto will retain your personal data (encrypted) either until your Provider collects and removes your personal data from our system or until no later than 14 days after your personal data has been retrieved.
If you use Ockto to collect data that can be used to get advice on mortgages or for mortgage applications, then we kindly ask your consent to temporarily store this information (encrypted). This will give mortgage providers asked by your advisor to provide a mortgage proposal the opportunity to retrieve your personal data directly from Ockto or via the secured Hypotheek Data Netwerk (HDN). This will save you, your advisor, and the mortgage providers a lot of time.
The processing of this personal data is subject to the Privacy Statement of the Provider receiving or actively collecting your (personal) data via Ockto. Please make sure to consult the Provider’s Privacy Statement on their website.
Your data when requesting banking transactions (PSD2)
In addition to what is mentioned above, and if this is relevant and with your consent, Ockto may also collect and forward information on banking transactions to the Provider. Your bank statements can contain sensitive information that may indicate your race or ethnic background, political opinions, religious or philosophical beliefs, or trade union membership. Ockto will always ignore such information. When collecting information about your banking transactions, Ockto can see the names and IBAN numbers of third parties listed on your bank statements. Ockto will only disclose such details to the Provider with your explicit consent.
If you collect banking transactions via Ockto and you wish to forward them to the Provider, then Ockto is legally obliged to confirm your identity and to make sure that your name is not on any sanction and PEP lists. Ockto anonymises such information and maintains a retention period of five years.
Use of the Ockto public website
The Ockto website allows you to send us personal data, which will be processed as follows:
- When you fill in a contact form and send it to us via our website, we only use the entered details to follow up on your message;
- When you use our website to respond to a job vacancy, we only use your provided personal details to respond to and follow up on your application;
- When you enter your email address because you wish to be informed about Ockto’s activities, we only use this email address to send you the relevant information.
Ockto has taken all due technological and organisational security measures to protect data against any accidental or wilful manipulation, loss of data, destruction, and access by unauthorised persons or parties. Our security procedures are constantly monitored and improved by introducing new technologies.
Third parties with which Ockto collaborates are required to uphold our policy in this regard and respect your privacy. All third parties have to sign a processing agreement with Ockto.
You are entitled to view, edit or delete all personal data stored in our system at all times. Furthermore, you have the right to withdraw your consent for the processing of your data or to object to the processing of your personal data by Ockto. You are also entitled to data portability. You can request the viewing, editing, deleting, or the transfer of your personal data, or send a request for withdrawal of your permission or an objection to the processing of your personal data via email. You can send any emails with such a request to: firstname.lastname@example.org
Ockto B.V., located at Gooimeer 1, 1411 DC in Naarden, is responsible for the processing of personal data as described in this privacy statement.
1411 DC Naarden