Privacy Policy

Last updated: January 2024

ThingsDB uses personal data from customers, employees and partners. Personal data is mainly collected during the execution of management, project and security services.

Customers must be able to rely on ThingsDB to handle personal data with care and security. ThingsDB is aware that with the arrival of new technological developments and innovative facilities, the privacy of customers must also be guaranteed, for example through measures in the field of information security, data minimization, transparency and user control.

The board and management play a crucial role in guaranteeing privacy.

ThingsDB gives a clear direction to privacy through this policy and shows that it guarantees, protects and enforces privacy. This policy applies to the entire organization, all processes, components, objects and data collections of ThingsDB. This privacy policy of ThingsDB is in line with the general policy of national and European laws and regulations.

Legal frameworks for handling data

ThingsDB is responsible for drafting, implementing and enforcing the policy. Among other things, the following legal frameworks apply:

  • General Data Protection Regulation (AVG).

  • Implementing Act General Data Protection Regulation.

Starting points

ThingsDB handles personal data securely and respects the privacy of those involved. ThingsDB adheres to the following principles:

  • Lawfulness, decentness, transparency Personal data is processed in accordance with the law and in a proper and careful manner.

  • Basis and goal retention ThingsDB ensures that personal data is only collected and processed for specific, explicitly described and justified purposes. Personal data is only processed with a fair basis.

  • Data minimization, ThingsDB only processes the personal data that is at least necessary for the predetermined purpose. ThingsDB strives for minimal data processing. Where possible, less or no personal data is processed.

  • Retention period, personal data is not stored any longer than necessary. The retention of personal data may be necessary to properly perform the duties of ThingsDB or to be able to comply with legal obligations.

  • Integrity and confidentiality, ThingsDB handles personal data with care and treats it confidentially. For example, personal data is only processed by persons with an obligation of confidentiality and for the purpose for which this data was collected. ThingsDB also ensures appropriate protection of personal data. This security is laid down in the ThingsDB information security policy.

  • Share with third parties, in the case of cooperation with external parties, where data processing of personal data is involved, ThingsDB makes agreements about the requirements that data exchange must meet. These agreements comply with the law. ThingsDB checks these agreements annually.

  • Subsidiarity, in order to achieve the purpose for which the personal data are processed, infringement of the privacy of the citizen concerned is limited as much as possible.

  • Proportionality, the infringement of the data subject's interests may not be disproportionate in relation to the purpose to be served.

  • Rights of data subjects, ThingsDB honors all rights of those involved.

This privacy policy comes into effect after adoption by the board of ThingsDB. The policy is evaluated every 3 years and revised if necessary.