Our Privacy Statement

What is RegLab?

RegLab is an innovative start-up dedicated to developing software and related services for legal and financial service providers to comply with AML rules and regulations. We develop our software and services based on the conviction that good and efficient client onboarding is the beginning of an optimal client relationship. In doing so, we make a valuable contribution to the integrity of the financial system, and we strengthen its gatekeepers. 

Our vision on privacy

RegLab is concerned with supervision and enforcement. The General Data Protection Regulation, which is being enforced from 25 May 2018 and regulates the use of personal data, plays an important role in the field of supervision and enforcement in the growing digital world. RegLab sees privacy and data protection as an essential part of their services and something that needs to be in order. RegLab uses personal data via its website by collecting information via cookies and when visitors use the contact form or demo scheduler. RegLab always does this carefully and in line with the law. 

Contact details

KvK:71832521
RegLab
Kennemerplein 6-14
2011 MJ Haarlem
info@reglab.com

Who processes the personal data?

RegLab is responsible for the processing carried out via our web page. RegLab is responsible for these processing operations for the proper and careful processing of personal data and compliance with applicable laws and regulations. 

What is the processing of personal data?

Personal data is information about someone or information that can be traced back to one person. Processing entails all actions that an organization can perform with personal data, from collecting to destruction. The mere consultation of personal data is also processing. This privacy statement explains how RegLab securely processes your personal data via the website in accordance with laws and regulations. 

Why, how and what does RegLab process?

Contact form and demo scheduler
If a visitor wishes to receive our advice, more information or a demo, he or she can contact us via the contact form or demo scheduler. RegLab then processes this personal data. The purpose of this is to provide the data subject with the desired information. Only for this purpose will RegLab use the personal data given to it. The legal basis for this is permission. This gives the person involved when looking for contact. 
 
RegLab is aware of the sensitivity of the open fields in the contact form and demo scheduler. That is why she always checks whether the personal data submitted to her is necessary to answer the information request. If not, that data will be deleted.

Cookies

RegLab uses cookies on its website. Cookies are small, simple text files of information that your computer or mobile device stores when you visit our website. That information is about your behaviour on the website. RegLab uses this with the aim to facilitate navigation on the website, to analyse the use of the website and to optimize the website. These are necessary / statistical cookies (it is strictly necessary to provide the service requested by the user with minor consequences for the data subjects / it is necessary to gain insight into the quality and effectiveness of the service), for which RegLab does not require permission (Article 11.7a of the Telecommunications Act).

Does RegLab work with other parties?

RegLab uses third-party service providers for customer relationship management, advertising, analytics, and other business operations. These providers may process personal data on our behalf in accordance with their respective privacy policies. 

• Customer Relationship Management (CRM): We use HubSpot to manage customer data, including contact details and communication preferences. Legal basis for processing: legitimate interest, contractual necessity, and consent. HubSpot may act as data processor. HubSpot Privacy Policy.

• Advertising: We run targeted campaigns via Google Ads and LinkedIn Ads. For this, we may share encrypted (hashed) personal data, such as names, company names, (work) email addresses, and phone numbers. Legal basis for processing: legitimate interest and consent. These platforms process data under their own privacy policies: Google Ads | LinkedIn Ads. Depending on the situation, Google and LinkedIn may act as processors or as independent data controllers. 

• Analytics & Cookies: We use Hotjar and Google Analytics to analyse website usage. This data is anonymised and cannot be traced back to individuals unless a visitor voluntarily shares personal information with us (e.g., by submitting a contact form). Legal basis for processing: legitimate interest and consent. 

We may also collect personal data from publicly available sources, such as social media platforms, to improve our services and personalize our communications. 

Some of our third-party service providers may process personal data outside the European Economic Area (EEA). Where this is the case, we ensure that appropriate safeguards, such as Standard Contractual Clauses (SCCs), are in place to protect your data. 

We process this data based on our legitimate interest in effectively promoting our services and product. We have carefully assessed the balance between our marketing interests and the privacy rights of our contacts. Where required, we obtain explicit consent for the use of personal data for advertising purposes. We do not retain personal data used for advertising campaigns longer than necessary. When the data is no longer relevant, it is deleted or anonymized. 

How long does RegLab use the personal data?

• RegLab uses the personal data from the contact form and demo scheduler as long as necessary to comply with the information request. After this, the data is deleted. 
• The data collected with cookies is used for as long as necessary to achieve the purpose. This means that it will be deleted afterwards.
• We retain customer relationship data in HubSpot for as long as necessary to maintain our business relationship or comply with legal obligations.
• Advertising data is retained only for the duration necessary for campaign effectiveness, after which it is anonymized or deleted. 

What are my rights as a data subject, and how do I invoke them?

If RegLab processes your personal data, you have various rights that you can invoke with regard to RegLab:

• The right to inspect your personal data.
• The right to rectification of the personal data if you think that the personal data is factually incorrect or incomplete.
• The right to erasure if: (1) the personal data is no longer needed for the purposes for which RegLab processed it; (2) the data - subject withdraws his consent; (3) there are no compelling reasons to continue processing after objection by the data subject; (4) there is a legal obligation for RegLab to erase the data.
• The right to restriction of processing.
  - The right to object to processing.
  - The right to have personal data transferred to another party, provided that the processing is based on permission or the execution of an agreement.
• The right to withdraw your consent at any time.
• The right to file a complaint with the national supervisor about the processing of your personal data by RegLab.

All rights except the right of complaint can be invoked by sending an email to info@reglab.com. Here you make clear which right you are invoking and (if required by law) the reason why you are invoking this right. RegLab will always first verify your identity by means of a copy of an identity document. RegLab will respond to the request within a month. In the event that settlement is not possible within this period, we will extend the period by a maximum of 60 days and inform you of this immediately. To make use of your right to complain to the national supervisory authority (the Dutch Data Protection Authority), you can submit a complaint here.

Data security

We take appropriate technical and organisational measures to secure personal data against loss, unauthorised access, and misuse. For additional information about data security, please visit www.reglab.com/informatiebeveiliging

Do you have any further questions?

Feel free to contact us via info@reglab.com or visit our office.