Privacy Policy for 2factors BV, owner of tritonx.nl and tritonx.cloud

Customer Data Platform tritonX is a product of 2factors BV. By using our services, you agree to this privacy and security policy.

Storage of data relating to our services

  • We use your data exclusively for the operation of our Customer Data Platform tritonX.

  • Data from one organisation is stored separately from data of other organisations.

  • Personal data is stored separately from transaction data.

  • Your data is securely stored on our servers for as long as you use our services.

  • When you stop using our services, your data is automatically deleted within three months.

  • We store personal data, but only when it directly relates to your own customers.

  • We also collect and retain non-personal transaction data, including data that cannot be traced back to individuals.

  • Data processing and storage takes place via external parties, in AWS data centres within Europe.

  • When you use third-party software in combination with our services, we refer to the privacy and security terms of these parties. We take appropriate measures to keep connections with these services as secure as possible, but cannot be held responsible for security incidents, data breaches or other problems caused by these external software vendors.

  • If stored data is incorrect or incomplete, we ask you to inform us of this.

Security of your data

  • The tritonX SaaS application of 2factors BV uses official APIs (Application Programming Interfaces) to access data.

  • Data transmission takes place via encrypted connections.

  • For logging into official APIs, our systems use the OAuth 2.0 authorisation protocol where possible.

  • We ensure that technical and organisational measures:

    • are appropriate, taking into account the state of the art, the nature of the personal data and the specific risks to which this data is exposed;

    • are established and implemented in such a way that we comply with applicable data protection legislation.

Description of technical and organisational measures

Employees

  • All employees (internal and external) have signed a confidentiality agreement.

  • Employees act in accordance with our security guidelines.

  • Employees have access only to the data necessary for the performance of their duties.

Logical user rights

  • Access rights to systems are clearly defined and managed to ensure the security and integrity of information.

  • Periodic reviews are carried out on both logical (network) access and physical access to facilities.

Security and maintenance of network, servers and applications

  • The environment in which data is processed is strictly protected against misuse and attacks.

  • The environment in which personal data is processed is actively monitored.

  • Changes to applications are tested in advance for vulnerabilities before being deployed to production.

  • A patch management process is in place whereby security updates are installed periodically.

  • Access to systems is logged and monitored, including checks for unauthorised access to personal data.

  • Passwords and other sensitive data are stored encrypted.

  • During the login process, encrypted connections are used and two-factor authentication (2FA) is required.

  • Exchange of personal data takes place in encrypted form.

  • The exchange of personal data with third parties on behalf of the customer is also carried out in encrypted form.

  • Developments and changes within the service are tested and reviewed before being put into production.

Security reports

  • For server hosting in Europe, 2factors BV uses AWS as a sub-processor. AWS data centres are ISO 27001 certified.

Withdrawal of access to data / deletion of data

  • You can withdraw 2factors BV's access to your data at any time by sending an email to support@tritonx.cloud or by withdrawing access rights within the relevant data sources. If you need assistance with this, please contact our support department. Please note that withdrawing access may have consequences for the operation of our services.

  • After termination of your trial period or subscription, your data is automatically deleted within three months. If you wish immediate deletion, you can send a request to support@tritonx.cloud.

Confidential information

Information may be exchanged via:

  • Written communication (on paper or digitally);

  • Electronic and/or optical data carriers;

  • Access to data storage locations or online platforms such as databases, analysis tools, advertising platforms and e-commerce systems;

  • Oral communication, presentations or demonstrations.

Handling of confidential information

  • 2factors BV treats all information as strictly confidential and takes appropriate measures to protect its privacy and security.

  • Confidential information is not shared with third parties unless explicitly agreed with or requested by the providing party.

  • Confidential information is destroyed or returned as soon as possible upon request from the providing party.

  • 2factors BV considers all received information as confidential unless one or more of the following situations apply:

  • Data that is already publicly available or has been made publicly available. If an end user or customer nevertheless requests the deletion of such data that we retain on your behalf, we ask you to inform us of this.

  • Aggregated data that cannot be directly or indirectly attributed to a person or organisation, such as industry benchmarks, forecasts, trends and other aggregated insights.

  • General ideas, concepts, knowledge or generic techniques.

Disclaimer

  • 2factors BV cannot be held responsible for conclusions, interpretations or actions based on our services.

  • 2factors BV uses third-party software for part of its service provision and cannot be held responsible for interruptions, errors or malfunctions caused by such software, even if this affects our service provision.

  • Some customers have a separate Service Level Agreement (SLA). In that case, the SLA takes precedence over this document.

  • Dutch law applies to this agreement.

  • Disputes arising from or relating to this data processing agreement are submitted to the competent court in Amsterdam.

  • Changes or additions to this data processing agreement are only valid if they are recorded in writing, explicitly refer to this agreement and are signed by both parties.

Questions?

Do you have any questions about this privacy policy? Please feel free to contact us at info@tritonx.cloud.