Privacy statement
Who we are
AxonVendor is a service of Axon Factory, a trade name of M. de Jager Holding B.V., Kweeklust 7, 2203 ZB Noordwijk, the Netherlands, KVK 60613319. Axon Factory is the controller for the data you enter and for the other processing on this page, except the payment itself (see Mollie below). Questions about your data go to support@axonfactory.ai.
Which data, for what and on which legal basis
| For what | Which data | Legal basis |
|---|---|---|
| Carrying out the order: your register, the analyses and the other documents, the e-mails at the start and at delivery, and handling anything that goes wrong. | Company name, KVK number, invoice address, e-mail address, document language, and your answers about your company and your vendors. | Performance of the contract (art. 6(1)(b) GDPR). If you order on behalf of an organisation, our legitimate interest in performing the contract with that organisation (point f). |
| Keeping your answers while you fill them in, and "Save and continue later". | Your answers, a functional cookie, and with "Save and continue later" your e-mail address for the link. | At your request, before entering into the contract (point b). |
| Measuring through which channel orders come in. | The origin of the link you came in on: a short code, for instance for a newsletter. | Legitimate interest (point f): knowing which channels work. We build no profiles with it. |
| The free preview: confirming your e-mail address, collecting public information about one vendor and showing the result. | Name and domain of the vendor, the kind of service, your answers to the four questions about your use, the language of the page, the origin of the link, and a pseudonymised (hashed) version of your e-mail address and IP address. We only keep your e-mail address itself as long as needed: until the link to the result is sent, or with news until the one reminder after three days. | At your request, before entering into a contract (point b). Limiting misuse with limits per e-mail address, connection and vendor: legitimate interest (point f). News and the one reminder: consent (point a), which only counts if you leave it ticked when you confirm. |
| Limiting abuse with limits per connection, per e-mail address and per vendor. | The pseudonymised (hashed) version of your IP address and e-mail address. | Legitimate interest (point f): preventing that AxonVendor is misused or overloads vendors. |
| Collecting public information about vendors and keeping it as evidence, so we can check a question or correction request. | From public pages of vendors: the URL, the time, a hash, the plain text and the quotes. No data about you or your order. The pages may contain names of third parties (see below). | Legitimate interest (point f): an analysis we can support and, if something is wrong, correct. |
| Correction requests and exclusions of vendors through the page for vendors. | Correction: domain, contact address, the disputed statement and the explanation. Exclusion: the domain and the e-mail address on that domain, which we only use for the confirmation e-mail and do not keep; of the link we only keep a hash. | Legitimate interest (point f), at the vendor's request. |
| At most two reminders about the call and the refund, on day 21 and day 50 after delivery. Every reminder has a stop link. | E-mail address, order number and the final date of the refund. | Performance of the contract: the refund belongs to your order. |
| Booking and holding the call, and refunding afterwards. | What you enter when booking in Microsoft Bookings, such as name, e-mail address and order number, and the date of the call. | Performance of the contract: the refund offer belongs to your order. |
| Invoicing, refunding with a credit invoice, and the accounts. | Company name, KVK number, invoice address, e-mail address, amount and order number. | Performance of the contract and a legal obligation (points b and c): the tax retention duty. |
| Answering questions and reports. | Your e-mail address, your name and what you write to us. | Legitimate interest (point f): answering your message. If you are a customer, also performance of the contract. |
| News about the services of Axon Factory, only if you tick that separately. | E-mail address and company name, with the time of your choice and the version of the text you saw. We pass them on to the contact list of Axon Factory. | Consent (point a). You can withdraw it at any time, in every news e-mail or through support@axonfactory.ai. |
Where we write "hashed", we mean pseudonymised: the data is not stored readably, but can be traced back to you with extra information. So it remains personal data.
Who receives the data
We do not sell data. These parties receive data, each only what they need. Processors work on behalf of Axon Factory, under a data processing agreement.
| Who | For what and which data | Where and with which safeguard |
|---|---|---|
| Microsoft Azure | Hosting of the website, the database, the evidence and the documents. Processor. | Region West Europe (the Netherlands), within the EEA. |
| Resend | Sends the e-mails: the link to continue later, the e-mails at the start and at delivery, the reminders, and the confirmation e-mails of the preview and of an exclusion. Receives the e-mail address and the content of the e-mail. Processor. | United States. Safeguard: the EU-US Data Privacy Framework or standard contractual clauses. |
| Anthropic | A language model that extracts statements from public pages of vendors and recognises the name of a vendor. Receives only public text from vendor websites and, when we do not recognise a vendor by its domain, the name of that vendor as you entered it, without anything else. Never your other answers, your name or your KVK number. For a sole trader the name of the vendor can be the name of a person. Processor. | United States. Safeguard: standard contractual clauses. No data about you goes there; public pages may contain names of third parties. |
| Mollie, through AxonHub | The payment and the refund. Mollie is an independent controller for that. AxonHub is Axon Factory's own invoicing system and makes the invoice and the credit invoice with your company details. | The Netherlands, within the EEA. |
| KVK (Dutch Chamber of Commerce) | Looks up your company by its KVK number at checkout. Receives only that number. | The Netherlands, within the EEA. |
| PDOK (Kadaster) | Looks up street and town from your postcode and house number. Receives only those two. | The Netherlands, within the EEA. |
| Microsoft 365 and Microsoft Bookings | The support mailbox, and booking the call. Receives what you e-mail us or enter when booking. Processor. | Within the EU. For what does leave the EEA: the EU-US Data Privacy Framework or standard contractual clauses. |
| Contact list of Axon Factory | Only if you choose news: your e-mail address and company name, with the time and the version of the text. | Within the EEA. |
Transfers outside the EEA
We keep your data within the EEA. Resend sends the e-mails from the United States; the EU-US Data Privacy Framework or the standard contractual clauses of the European Commission apply. Anthropic in the United States receives only public text from vendor websites and, when we do not recognise a vendor by its domain, the name of that vendor as you entered it, under standard contractual clauses; never other data about you. You can request a copy of the safeguard through support@axonfactory.ai.
How long we keep data
- The documents, your answers and your register
- 60 days after delivery. After that we also delete your e-mail address and only a pseudonymised (hashed) version remains.
- The order data (order number, company name, KVK number, plan, status, dates, origin of the link, date of the call)
- 12 months, then deleted.
- The proof that you accepted the general terms (version, language, time, order number and invoice number)
- 7 years, as long as the invoice. Without company name, KVK number or address.
- An order that was not paid
- 30 days.
- The link to continue later
- 60 days; we only keep a hash of the link.
- The free preview (vendor, your answers and the hashed versions of your e-mail address and IP address)
- 30 days; after that we delete them and the link to the result stops working. We delete your e-mail address itself sooner: as soon as the confirmation link expires or the link to the result is sent, or with news after the one reminder. What remains are counts only, without data about you, for 12 months of statistics.
- The evidence about vendors (URL, time, hash, plain page text and quotes, without data about you)
- 12 months after collection.
- Correction requests from vendors
- 12 months.
- Exclusions of vendors
- A request that was not confirmed: 7 days. A confirmed exclusion: as long as it applies, with only the domain.
- Technical log files (time, requested page, status, session id and vendor domains, without your answers)
- At most 90 days, then deleted automatically.
- Your choice for news on the contact list
- Until you unsubscribe.
- Invoices and credit invoices
- 7 years (legal retention duty), in AxonHub.
Personal data of third parties on public pages
Public pages of vendors may contain names or e-mail addresses, for instance of a data protection officer or a security contact. We keep those as part of the evidence, for 12 months. If such a name or address is in a short quote, it can appear in a customer's analysis. We do not use them otherwise. If your name is on such a page and you want to exercise your rights, e-mail support@axonfactory.ai.
Your rights
You have these rights over your personal data:
- Access: knowing which data we have about you and getting a copy.
- Rectification: having incorrect or incomplete data corrected or completed.
- Erasure: having your data deleted, except what we must keep, such as invoices.
- Restriction: having the processing paused, for instance while we assess your request.
- Portability: getting data you provided yourself in a common file format.
- Objection: objecting to processing based on legitimate interest.
- Withdrawing consent: for news you can always do that, without it changing anything about your order.
- Complaint: if you disagree with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
E-mail your request to support@axonfactory.ai. We respond within a month.
AxonVendor determines the risk of your use of a vendor, not anything about a person. We take no decisions about you based solely on automated processing, and build no profiles.
Cookies
This site has no tracking or advertising cookies and no analytics. We only use functional cookies that link your register and your payment to this browser. We keep the origin of the link only in your browser, until you close the tab.