Privacy

This is the privacy statement of Quest Forecast (“Quest Forecast”). Quest Forecast attaches great importance to your privacy. In this statement, we explain how we handle the personal data we process when you use our services, visit our website, or are otherwise in contact with us.

What personal data may be processed

Personal data is data that can be traced back to you as a person, either directly or indirectly. This could include your name and address details, for example. Our basic principle is that we never collect and process more personal data about you than is strictly necessary.

Quest Forecast may process the following personal data:

• Name, address, and contact details;
• Extracts from the Chamber of Commerce and/or other public registers;
• Payment and bank details;
• IP address;
• Details about the device you use to visit our website and your location;
• Details about your visit to our website;

Purposes and grounds for processing your personal data

We process your personal data for various purposes and on various grounds. The personal data we process about you is the personal data that is necessary for the performance of our services. For example, we need your personal data to be able to carry out the assignment you have given us, to maintain proper records, and we have a legitimate interest in improving (our communication via) the website, for example. We also use your personal data to keep in touch with you and to keep you informed of relevant developments. We also need your personal data to comply with legal obligations that apply to us. These include legal requirements relating to the organization of our business operations.

The controller responsible for the processing of personal data

Quest Forecast B.V., with its registered office at Rokin 75 (1012 KL) Amsterdam, is responsible for collecting and processing your personal data within the meaning of the General Data Protection Regulation (“GDPR”).

Provision of personal data to third parties

Your personal data will be passed on to third parties if this is necessary for the performance of the agreement in which you have instructed us to provide services, if we have a legal obligation to do so, or in cases where we use an external service provider in the performance of our work. The following types of third parties may receive your personal data:

• Software developers
• Hosting providers
• CRM tools
• Support tools

Quest Forecast is responsible for the services provided by these parties. In the event that access to your personal data by a third party is necessary, Quest Forecast will enter into a processing agreement with that third party to ensure that the processing of your personal data is correct, secure, and confidential.

These third parties may be located outside the EEA or may use servers located outside the EEA. If this is the case, we will provide appropriate safeguards, such as by entering into a contract based on model clauses approved by the European Commission (Article 46 GDPR).

What rights do you have regarding your personal data?

Under the GDPR, you have the following rights with regard to your personal data:

• The right to ask whether we process your data and, if so, to access it;
• The right to request rectification of your data if it is incorrect, incomplete, or irrelevant, and the right to have your data erased;
• The right to object to the processing or to request restriction of the processing;
• The right to withdraw consent for processing, if the processing is based on your consent;
• The right to receive or transfer your data to an organization designated by you, in a structured, commonly used, and machine-readable format;
• The right to lodge a complaint with the Dutch Data Protection Authority if you believe that we are processing your personal data unlawfully.

A request can be made via info@questforecast.com. We may ask you for additional information to verify your identity and/or impose additional conditions on your request. Circumstances may arise that prevent us from complying (fully) with your request, for example in connection with statutory retention periods.

For how long do we retain your data?

All personal data you provide to us will not be stored longer than necessary for the purpose for which it was collected. In any case, we will store the personal data you provide for the period necessary to carry out the assignment you have given us. Certain data is subject to a statutory retention period. For example, we have a fiscal retention obligation of at least seven years. We retain invoices addressed to you for this period.

Changes

This privacy statement may change from time to time if there is reason to do so. We therefore advise you to consult the privacy statement regularly.

Contact

If, after reading this privacy statement, you still have questions about how we handle your personal data, please contact us at support@questforecast.com.