Privacy Policy

PRIVACY POLICY

Last updated: May 10th 2022
Cirrus is committed to keeping your data safe. This policy describes why we process and how we protect personal data.

WHY WE PROCESS PERSONAL DATA

Like most companies, we process personal data for a number of purposes.
• To market and sell our products; to manage and develop our existing customer relationships; to recruit new and work with existing partner organisations.
• To demonstrate our offerings and capabilities by letting potential customers demo our products.
• To provide our customers with support, to gather feedback and respond to questions from users of our product or the general public.
• To gather and organize ideas from our user base on the ideas portal.
• To recruit users for interviews and moderated usability tests via our user panel.
• To assess and recruit candidates for open positions at the company.

LAWFUL REASON FOR PROCESSING PERSONAL DATA

Depending on the purpose, Cirrus relies on several lawful reasons for processing personal data.
• Consent – Your freely given, explicit and unambiguous consent. Example: you sign up for a newsletter.
• Contract – A legal contract between us and another organization. Example: our customer contracts.
• Legitimate interest – When we have a significant interest and necessity in processing your personal data, and the impact on you is negligible. Example: you visit our web-pages.
• Lawful reason – Law might require us to process personal data. Example: accounting regulations.

YOUR RIGHTS WHEN WE PROCESS YOUR PERSONAL DATA

If you are located in the EU/EEA you have legal rights related to the processing we do of your personal data. The rights can depend on our reason for processing personal data.
• Right to access. This includes asking us for a copy of your personal data.
• Right to rectification. You have the right to ask us to correct erroneous personal information.
• Right to erasure. You have a right to ask us to delete your data.
• Right to restrict processing. You have a right to ask us to restrict processing of your data.
• Right to object. You have a right to object to processing that is happening
• Right to data portability. You have a right to ask for your data to be transferred to another organization.
In some cases, these rights are subject to certain conditions and limitations. If you would like to learn more about these rights, please contact our Privacy Officer.
You always have a right to contact us and ask for your rights to be executed. We are obliged to answer your request within 30 days. If we deem a request to not be valid, you have a right to complain to the supervising authority in the country of your residence (reference list can be found here).
If you want to exercise any of these rights, you have several ways to do so. You can:
• Contact our Privacy Officer (Martijn van der Jagt) at privacyofficer@cirrusassessment.com
• Contact our Support staff via our Help Centre.

All requests to Cirrus related to data privacy will be processed within 30 days.

CONTROLLER’S CONTACT DETAILS
Unless otherwise stated, the controller for the processing of personal data is:

Cirrus BV
Spaces House Modernes,
Lange Viestraat 2b,
3511 BK Utrecht
Netherlands, and its subsidiaries