Sonar is offered by LEGAL ENTITY NAME, Chamber of Commerce CHAMBER OF COMMERCE NUMBER, REGISTERED ADDRESS. This statement explains how we handle the data of users of the platform. Questions or requests: PRIVACY ADDRESS.
Two roles
- Data in a workspace (companies, contacts, e-mail, notes) belongs to the organisation that subscribes to the workspace. That organisation is the controller; we process that data on its behalf, under the data processing agreement. If you are a contact and want to see or remove your data, contact that organisation.
- Data of your account (below) we process ourselves, as controller.
Which account data
- name, e-mail address, language and password (only as a hash);
- the secret for two-factor authentication and your passkeys;
- which workspaces you are a member of and with which role;
- sign-in moments, and IP address and browser when signing in and when changing things (audit log);
- the settings you choose yourself, such as your e-mail signature and notifications.
Billing details of customers, once payment runs through the platform (S4).
Why and on which basis
To let you sign in, show your workspaces, secure the platform and investigate abuse. Legal basis per purpose, to be completed by the lawyer.
How long
- Your account stays as long as you are a member of a workspace. When your last workspace is deleted, we delete your account as well.
- The audit log of a workspace follows the retention period that workspace chooses.
- Encrypted backups still hold data for up to 12 months after deletion. When we restore a backup, we carry out earlier requests to be forgotten again.
Where
The "EU only" promise cannot be confirmed yet.
Hosting: the processor is not filled in yet.
Platform mail: the processor is not filled in yet.
The parties that process data for the platform are listed on the Sub-processors page.
Your rights
You can see your account data, have it corrected or have your account deleted. Mail PRIVACY ADDRESS. We record every request in our register. When we delete your account, records in workspaces remain and are attributed to "deleted user".
Right to lodge a complaint with the Dutch Data Protection Authority, and further rights, to be checked by the lawyer.
Cookies
We only use cookies that are needed to sign in and to protect forms. No tracking of platform users.
Changes
When this statement changes, the new version is published here with a new version date.