2.1

When you use the Platform, we collect the following categories of personal data:

2.1.1 identification data such as user account information (if any), name, email address;

2.1.2 technical data such as your IP address, your operating system, your browser type;

2.1.3 behavioural data such as the manner in which you use the Platform and how you interact with the Platform.

2.2

When you register for a user account, we collect the following categories of personal data:

2.2.1 contact information such as email address, name and surname, telephone number and address;

2.2.2 biographical information such as employer and job title;

2.2.3 communication preferences such as preferred language;

2.2.4 technical data such as your IP address, your operating system.

2.3

If you contact us to inform us of any queries you may have, we will collect the following categories of personal data:

2.3.1 identification data and contact information such as you user account (if any), email address or phone number;

2.3.2 the content of your correspondence with us.

2.4

When you register for our newsletter, we collect the following categories of personal data:

2.4.1  identification data and contact information such as you user account (if any), email address or phone number;

2.4.2 technical data such as information on your device and your IP address;

2.4.3 behavioural data such as links opened, click throughs;

2.4.4 communication preferences.

6.1
‍Right for information and access

You are always entitled to know what personal data we hold about you and how, where and for how long such personal data are processed. You therefore have the right to request information regarding the personal data that we hold and process concerning you and to access such personal data. Upon your request, we will provide you with information and/or access to the personal data that is being processed and the source of such personal data.

Please note that we may request you to provide us with satisfactory proof of your identity before complying with your request for information or access.

6.2
‍Right of rectification and right of erasure

You have the right to request us, free of charge, to rectify any inaccurate personal data, or to complete any incomplete personal data, concerning you. You may also have the right, in certain circumstances, to require us, free of charge, to erase all your personal data, without undue delay.

6.3
Right to object to data processing

You have the right at any time to object to the processing of your data on grounds relating to your particular situation. If you object, we will no longer process your personal data unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

In case we process your personal data for direct marketing purposes (such as our newsletter), and you do not wish to receive advertising, you have the right to object to this at any time. If we receive such objection from you, we will stop processing your data for direct marketing purposes.

6.4
Right to withdraw your consent

You may, at any time, withdraw the consent that you have given to Levenue to the processing of your personal data. Please note that if you withdraw your consent, that does not make the data processing carried out by us prior to receiving your request unlawful.

6.5
Right to restriction

You have the right to "restrict" our use of your personal data where: (i) you contest the accuracy of the personal data, (ii) the processing is unlawful and you request us to "restrict" our use of your personal data rather than to erase it; (iii) we no longer need the personal data for the original purpose of the processing but they are required by you for the establishment, exercise or defence of legal claims; or (iv) you have objected to the processing and there is a verification of whether our legitimate grounds can override yours.

6.6
Right to data portability

Within the limits set forth in the GDPR, you may request the portability of your personal data, i.e. obtain that the personal data you have provided to Levenue be returned to you or transferred to someone else of your choice, in a structured, commonly used and machine-readable format.

6.7
Right to lodge a complaint with the competent authority

If you are not satisfied with the way we process your personal data, please contact our privacy team via the contact details provided in Section 1 of this privacy policy and we will investigate your concern. You also have the right to lodge a complaint with a supervisory authority. In the Netherlands, the supervisory authority is the Autoriteit Persoonsgegevens (address: Bezuidenhoutseweg 30, 2594 AV The Hague, The Netherlands, website: https://autoriteitpersoonsgegevens.nl).  

7.1
Disclosures and/or to third parties

Other than as set out in this privacy policy, Levenue will not sell or otherwise disclose your personal data to third parties without obtaining your prior explicit consent, unless this is necessary for the relevant purpose set out in this privacy policy or we are required to do so by law.
‍
We may share personal data with third party cloud providers and service providers who help us to provide, understand, commercialise and improve the Platform and our services. We do not authorise these third-party service providers to use or disclose your personal data except as strictly necessary to perform any services under our supervision or to comply with applicable laws. We seek to provide any such third-party service provider with only the personal data they need to perform their specific function.

Levenue puts in place contractual (including data protection, confidentiality and security provisions) and other organisational safeguards with third-party service provides who have access to your personal data to ensure an adequate level of protection of your personal data.

At the date of this privacy policy, Levenue uses the following third-party providers:

1. Salt edge;
2. Vercel;
3. SendGrid;
4. MessageBird;
5. Google - G Suite;
6. AWS
7. DocuSign;
8. Stripe;
9. Chargebee;
10. Recurly.

7.2
Transfers to third countries

If recipient of your personal data is located in a non-EEA country and this country is not recognised by the European Commission as offering an adequate level of data protection, we will put in place appropriate safeguards to protect your personal data in accordance with the GDPR, such as the Standard Contractual Clauses adopted by the European Commission, if necessary with additional measures.