GDPR Information

1. What is GDPR?

The General Data Protection Regulation (GDPR) is a European privacy law that has been in effect since May 25, 2018. This law gives you more control over your personal data and requires organizations to be more transparent about how they use your data.

2. Your rights under GDPR

Right to information (Art. 13-14 GDPR)

You have the right to know what data we collect about you and how we use it. You can find this information in our privacy policy.

Right of access (Art. 15 GDPR)

You have the right to receive a copy of all personal data we process about you. You can submit this request via besmart@dombo.ai

Right to rectification (Art. 16 GDPR)

You have the right to have inaccurate or incomplete data corrected. You can do this through your account settings or by contacting us.

Right to erasure (Art. 17 GDPR)

Under certain circumstances, you have the right to have your data deleted. This right is not absolute and may be limited by legal obligations.

Right to restriction of processing (Art. 18 GDPR)

You have the right to restrict the processing of your data in certain situations, for example when you have objected to the processing.

Right to data portability (Art. 20 GDPR)

You have the right to receive your data in a structured, commonly used and machine-readable format, so you can transfer it to another service provider.

Right to object (Art. 21 GDPR)

You have the right to object to the processing of your data for direct marketing purposes or on grounds of your specific situation.

3. Data processing by Dombo

Legal basis

We process your data on the basis of:

• Consent: For marketing communication
• Contract performance: For providing our services
• Legal obligation: For tax and accounting
• Legitimate interest: For website analysis and security

Data categories

We process the following categories of data:

• Identification data (name, email, phone)
• Business data (company name, address, sector)
• Usage data (website visits, service usage)
• Technical data (IP address, browser, device)

4. Data security

We have implemented appropriate technical and organizational measures to protect your data:

• SSL/TLS encryption for data transmission
• Access control and authentication
• Regular security updates
• Employee training on data protection

5. Data sharing

We only share your data with:

• Trusted service providers (hosting, email, payments)
• Legal authorities when required
• Third parties with your express consent

6. Retention periods

We do not keep your data longer than necessary:

• Account data: Until you cancel your account + 1 year
• Invoice data: 7 years (legal obligation)
• Marketing data: Until you unsubscribe
• Website logs: Maximum 1 year

7. Exercising your rights

To exercise your rights, you can:

• Send email to: besmart@dombo.ai
• Call: 088 - 66 444 88
• Use your account settings

8. Complaints

If you are not satisfied with how we process your data, you can file a complaint with the Dutch Data Protection Authority (AP) via www.autoriteitpersoonsgegevens.nl

9. Contact

For questions about GDPR or your privacy rights:

• Email: besmart@dombo.ai
• Phone: 088 - 66 444 88