Privacy Policy

Last updated: December 2024

Introduction

Avento B.V. ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us. As a company operating in the Netherlands, we comply with the General Data Protection Regulation (GDPR) and Dutch privacy laws.

Data Controller

Avento B.V. is the data controller for the personal information we process. Our contact details are:

Data Collection

The data we collect includes personal information such as your name, email address, phone number, company details, and any information you provide when contacting us or using our services. We may also collect technical information about your device and how you interact with our website, including IP addresses, browser types, and usage patterns.

How We Use Your Information

We explain how we use your information for various purposes including providing our accounting services, communicating with you about your account and our services, processing payments and maintaining financial records, complying with legal and regulatory requirements, improving our services and website functionality, and sending you relevant business communications with your consent.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

  • Contract Performance: To provide our accounting services and fulfill our contractual obligations
  • Legitimate Interests: To operate our business, improve our services, and maintain client relationships
  • Legal Compliance: To comply with accounting, tax, and regulatory requirements
  • Consent: For marketing communications and non-essential cookies

Data Sharing and Disclosure

We may share your personal information in the following circumstances:

  • With trusted service providers who assist us in operating our business
  • With regulatory authorities and tax agencies as required by law
  • In response to legal process or to protect our rights and interests
  • With your explicit consent for specific purposes

We do not sell, trade, or otherwise transfer your personal information to third parties for marketing purposes.

Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Generally, we keep client records for at least seven years after the end of our business relationship, as required by Dutch accounting and tax regulations. Marketing data is retained until you withdraw consent or we determine it's no longer necessary.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right of Access: Request copies of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your data under certain circumstances
  • Right to Restrict Processing: Request limitation of how we process your data
  • Right to Data Portability: Request transfer of your data to another service provider
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent for processing based on consent

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure servers, access controls, and regular security assessments. However, no method of transmission over the internet is completely secure.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyse website usage. For detailed information about our use of cookies, please refer to our Cookie Policy.

International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses approved by the European Commission.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such information, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your personal data, please contact us at:

Supervisory Authority

If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.