PRIVACY POLICY

Article 1 - Definitions

1. Website (hereinafter: “Website”): the Opdrachtportaal platform accessible at opdrachtportaal.nl and its subdomains.
2. Party responsible for processing personal data (hereinafter: “the controller”): Opdrachtportaal, established at Staverenstraat 15, 7418CJ Deventer, the Netherlands, Chamber of Commerce number: 99959313.

Article 2 - Access to the website

Access to and use of the website are strictly personal. You will refrain from using the data and information of this website for your own commercial, political or advertising purposes, as well as for any commercial offers, in particular unsolicited electronic offers.

Article 3 - Website content

All brands, images, texts, comments, illustrations, (animated) images, video images, sounds and all the technical applications that can be used to operate this website and more generally all the components used on this website, are protected by the laws on intellectual property. Any reproduction, repetition, use or modification, by any means whatsoever, of all or just part of it, including technical applications, without the prior written permission of the controller, is strictly prohibited.

Article 4 - Management of the website

For the purpose of proper management of the site, the controller may at any time:

• Suspend, interrupt, reduce or decline the access to the website for a particular category of visitors
• Delete all information that may disrupt the functioning of the website or conflicts with national or international laws or is contrary to internet etiquette
• Make the website temporarily unavailable in order to perform updates

Article 5 - Responsibilities

1. The controller is not liable for any failure, disturbances, difficulties or interruptions in the functioning of the website, causing the (temporary) inaccessibility of the website or of any of its functionalities. You, yourself, are responsible for the way you seek connection to our website. You need to take all appropriate steps to protect your equipment and data against hazards such as virus attacks on the Internet. Furthermore, you are responsible for which websites you visit and what information you seek.
2. The controller is not liable for any legal proceedings taken against you:
   • Because of the use of the website or services accessible via the Internet
   • For violating the terms of this privacy policy
3. The controller is not liable for any damages that incur to you or third parties or your equipment, as a result of your connection to or use of the website and you will refrain from any subsequent (legal) action against the controller.
4. If the controller is involved in a dispute because of your (ab)use of this website, he is entitled to (re)claim all subsequent damages from you.

Article 6 - Collection of data

1. Your personal data will be collected by Opdrachtportaal.
2. Personal data means any information relating to an identified or identifiable natural person (‘data subject’).
3. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
4. The personal data that are collected on the website are used mainly by the collector in order to maintain a (commercial) relationship with you and if applicable in order to process your orders and service requests. They are recorded in an (electronic) register.

Article 7 - Your rights regarding information

1. Pursuant to Article 13 paragraph 2 sub b GDPR each data subject has the right to information on and access to, and rectification, erasure and restriction of processing of his personal data, as well as the right to object to the processing and the right to data portability.
2. You can exercise these rights by contacting us at privacy@opdrachtportaal.nl.
3. Each request must be accompanied by a copy of a valid ID, on which you put your signature and state the address where we can contact you.
4. Within one month of the submitted request, you will receive an answer from us.
5. Depending on the complexity and the number of the requests this period may be extended to two months.

Article 8 - Collected data and commercial offers

1. You may receive commercial offers from the collector. If you do not wish to receive them (anymore), please send us an email to the following address: privacy@opdrachtportaal.nl.
2. Your personal data will not be used by our partners for commercial purposes.
3. If you encounter any personal data from other data subjects while visiting our website, you are to refrain from collection, any unauthorized use or any other act that constitutes an infringement of the privacy of the data subject(s) in question. The collector is not responsible in these circumstances.

Article 9 - Data retention

The collected data are used and retained for the duration determined by law.

Article 10 - Cookies

1. A cookie is a small text file placed on the hard drive of your electronic device upon visiting our website. A cookie contains data so you can be recognized as a visitor when you are visiting our website. It enables us to adjust to your needs and it facilitates you to log in on our website. When you visit our website, we inform you about the use of cookies. By continuing to use our website you accept its use, unless we ask permission by other means. Your consent is valid for a period of thirteen months.
2. We use the following types of cookies on our website:
   • Functional cookies: like session and login cookies to collect session and login information.
3. When you visit our website, cookies from the controller and/or third parties may be installed on your equipment.
4. For more information about using, managing and deleting cookies for each electronic device, we invite you to consult the following link: https://autoriteitpersoonsgegevens.nl/nl/onderwerpen/internet-telefoon-tv-en-post/cookies#faq

Article 11 - Imagery and products offered

You cannot derive any rights from the imagery that accompanies any offered product on our website.

Article 12 - Applicable Law

These conditions are governed by Dutch law. The court in the district where the collector has its place of business has the sole jurisdiction if any dispute regarding these conditions may arise, save when a legal exception applies.

Article 13 - Contact

For questions, product information or information about the website itself, please contact: Luuk van Assendelft, Opdrachtportaal, Staverenstraat 15, 7418CJ Deventer, privacy@opdrachtportaal.nl, KVK 99959313.

Article 14 - Third-Party Calendar Integration and Data Processing

This article explains how we process personal data in connection with third-party calendar integrations, specifically Google Calendar.

14.1 Scope of Integration

Opdrachtportaal offers service providers (aanbieders) the ability to connect their Google Calendar account to facilitate scheduling of property service appointments with real estate agents (makelaars). This integration is optional and requires your explicit consent before activation.

14.2 Data Collected

When you connect your Google Calendar, we may access and process the following data:

• Calendar event titles, dates, times, and durations
• Attendee names and email addresses
• Event descriptions and meeting details
• Free/busy availability status
• Calendar account email address and display name

14.3 Purpose of Processing

Calendar data is processed exclusively for the following purposes:

• Determining your availability for scheduling property service appointments
• Creating, updating, and cancelling calendar events for confirmed appointments
• Sending appointment invitations and reminders to relevant parties
• Synchronizing appointment schedules between makelaars and aanbieders

14.4 Legal Basis

The legal basis for processing calendar data is your explicit consent (Article 6(1)(a) GDPR), which you provide when authorizing the Google Calendar integration. You may withdraw this consent at any time by disconnecting the calendar integration in your account settings.

14.5 Data Sharing with Third Parties

Calendar data is shared only with Google LLC as the calendar service provider, as necessary to perform the integration. We do not sell, rent, or otherwise distribute your calendar data to any other third parties. Data transfers to providers outside the European Economic Area are governed by appropriate safeguards, including Standard Contractual Clauses.

14.6 Data Retention

Calendar data is retained for the duration of your active integration. Upon disconnecting the calendar integration or terminating your account, all stored calendar data is deleted within 30 days. Aggregated, non-identifiable scheduling statistics may be retained for analytical purposes.

14.7 Security Measures

Access to calendar data is protected through OAuth 2.0 authentication. We store only the minimum access tokens required for the integration to function. All calendar data in transit is encrypted using TLS 1.2 or higher, and stored data is encrypted at rest.

14.8 Your Rights

In addition to the rights outlined in Article 7 of this policy, you have the right to:

• Disconnect the Google Calendar integration at any time without affecting your use of other platform features
• Request a copy of all calendar data we have processed on your behalf
• Request immediate deletion of all stored calendar data
• Restrict the scope of calendar access permissions at any time through your Google account settings

Article 15 - Google API Services User Data Policy

Opdrachtportaal's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we limit our use of Google user data to the practices explicitly disclosed in this privacy policy. We do not use Google user data for serving advertisements, and we do not allow humans to read user data unless we have your affirmative agreement, it is necessary for security purposes, it is necessary to comply with applicable law, or our use is limited to internal operations and the data has been aggregated and anonymized.