Privacy Notice
Your privacy matters to us. In this Privacy Notice (Privacy Notice) we explain how Stichting Justdiggit Foundation (Justdiggit or we) uses your personal data we collect through our Kijani App (Kijani App).
We are committed to protecting your privacy and ensuring the security of your personal data. Please read this Privacy Notice carefully to understand our practices regarding your personal data and how we will treat it.
Who is the data controller?
Your personal data is collected by Justdiggit. Our registered office is at Prins Hendrikkade 25, 1012 TM Amsterdam. You can contact us via email at info@justdiggit.org or by telephone at +31 (0)20 737 23 66. Additionally, the Kijani App provides a functionality that allows you to contact us via Whatsapp. We are the data controller under the General Data Protection Regulation (GDPR), responsible for deciding how and why your personal data is used.
How do we collect your personal data?
Your personal data is (a) provided by you; and/or (b) created by us during your engagement with us.
The types of Personal data we collect for our purposes and the applicable legal basis for our data processing.
In the context of your use of the Kijani App, we collect, store, and use personal data about you as set out in the ‘personal data’ column below. You will also find below the purpose of the processing and the legal basis we rely on for each type of personal data that we process about you.
If you fail to provide certain personal data when requested, we may not be able to perform all our legal and contractual obligations or carry out certain activities.
It is important that the personal data we hold about you is accurate and up to date. Please keep us informed if your personal data changes during your use of the Kijani App.
How long do we retain your personal data?
We do not process your personal data any longer than necessary for the processing purpose.
In this context we keep your personal data for as long as your account on the Kijani App is active. Your personal data is deleted five years after the last activity on the Kijani App, or directly after deleting your account on the Kijani App.
If we are subject to a statutory retention period, we will retain your personal data for the period specified by the law.
Notwithstanding the above, we may retain your personal data for the length of any applicable limitation period for claims that might be brought against us later.
In some circumstances, we may anonymise your personal data so that it can no longer be associated with you, in which case we may use such data without further notice to you.
With whom we share the personal data?
Where this is necessary in relation to the Kijani App, we will share your data with external service providers on the instructions and under the responsibility of Justdiggit. Such service providers are considered “processors” under the GDPR. Your personal data will remain under Justdiggit’s control in such cases. These external service providers will always be subject to Justdiggit’s written instructions, including certain security obligations. We share your data with the following categories of processors:
Further, we may disclose or share your personal data:
- to our group entities for business purposes, including administrative, management and accounting purposes, and as part of our regular reporting activities on company performance, in the context of a business reorganization or group restructuring exercise, for system maintenance support and hosting of data;
- if we sell our company or part thereof (including separate assets), or if we merge with another company. In such event, we may share your personal data with the new owner or merging party respectively, but only to the extent necessary for the purpose for which your personal data are processed;
- if we are subject to insolvency proceedings, as part of the sale of our assets by a liquidator (or similar); or
- we are legally obliged or allowed to do so. In such an event we shall share your personal data with the relevant supervisory authority, investigative authority or other governmental body.
Where do we store your personal data?
Justdiggit stores your personal data on servers located within the European Economic Area (EEA).
Your rights
In accordance with the applicable laws in the European Union, you have the right of access, the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability and the right to object. Please note that most of these rights are not absolute and subject to exemptions in the law, and may only apply to certain types of personal data or processing.
Below we set out your rights in more detail and give personal data on how you can exercise your rights.
We will respond to your request within one month, but have the right to extend this period to two months. If we extend the response period, we will let you know within one month from your request.
- Access: you are entitled to ask us if we are processing your personal data and, if we are, you can request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it. If your request is clearly unfounded or excessive, we reserve the right to charge a reasonable fee or refuse to comply in such circumstances.
- Correction or updating: you are entitled to request that any incomplete or inaccurate personal data we hold about you is corrected.
- Erasure (deletion): you are entitled to ask us to delete or remove personal data in certain circumstances. There are certain exceptions where we may refuse a request for erasure, for example, where the personal data is required for compliance with law or in connection with claims. When we need to rely on an exemption, we will inform you about this.
- Restriction: you are entitled to ask us to suspend the processing of certain of your personal data about you, for example if you want us to establish its accuracy or the reason for processing it.
- Transfer (data portability): you may request the transfer of a copy of certain of your personal data to another party (if technically feasible). You have the right to ask that we provide your personal data in an easily readable format to another company. Please note, this right applies to the personal data you have provided to us and only if we use your personal data on the basis of consent or where we used your personal data to perform a contract with you.
- Objection: where we are processing your personal data based on a legitimate interest, you may object to processing on this ground. You also have a right to object where we are processing your personal data for the purposes of profiling. However, we may be entitled to continue processing your personal data based on our legitimate interests.
- Withdraw your consent: Where you have provided your consent to our processing of your personal data you can withdraw your consent at any time. If you do withdraw consent, it will not affect the lawfulness of what we have done with your personal data before you withdrew consent.
If you want to exercise any of these rights, or to withdraw your consent, please contact us in writing at info@justdiggit.org.
Right to lodge a complaint
You also have a right to lodge a complaint with a supervisory authority, in particular in the Member State in the European Union where you are habitually resident, where you work or where an alleged infringement of data protection law has taken place. A list of EU supervisory authorities and their contact details is available here.
In the Netherlands you can make a complaint to the Autoriteit Persoonsgegevens (tel. +31 70 888 8500 or at https://autoriteitpersoonsgegevens.nl/en).
Changes to this Privacy Notice
This Privacy Notice will be changed from time to time.
We may change this Privacy Notice from time to time. At all times, we will publish the up-to-date version in the Kijani App. If we make any important changes to this Privacy Notice (e.g. regarding the personal data we collect, how we use it or why we use it), we will notify you.