How Qualimetrix Handles Personal Data.
This notice describes how Qualimetrix processes personal data as a company and as a processor for customers. It is drafted for review and is not in force until published by Qualimetrix.
Controller and contact
Qualimetrix, Amsterdam, Netherlands, KvK [to confirm], is the controller for data processed through this site and through commercial correspondence. Privacy questions go to compliance@qualimetrix.nl. The data protection contact is [name or role to confirm].
What is processed
For site visitors: request metadata required to serve the page. For correspondence: the name, contact details and content a sender chooses to provide. For customer engagements: schema, distributions and configuration metadata, and only the personal data a signed agreement authorises.
Purpose and lawful basis
Correspondence is processed to answer it, on the basis of legitimate interest or the steps preceding a contract. Customer processing is carried out on the documented instructions of the customer as controller, under a processing agreement. No profiling and no automated decision-making take place.
Production records
Qualimetrix is designed to reduce the number of environments that hold production records. Where a deployment processes them, processing takes place inside the boundary named in the agreement, and only counterparts and evidence records leave it.
Sub-processors
Sub-processors are listed per deployment in the agreement, with the processing location and purpose. The current list is available on request at compliance@qualimetrix.nl. [Publication of a standing list to confirm.]
International transfers
Processing takes place in the European Economic Area unless an agreement states otherwise. Where a transfer outside the EEA is necessary, it relies on an adequacy decision or on standard contractual clauses with a documented transfer assessment.
Retention
Correspondence is retained for [period to confirm]. Engagement artefacts, including evidence records, are retained for the period named in the agreement and are deleted or returned at its end. Retention horizons travel with each release.
Rights
Data subjects may request access, rectification, erasure, restriction, portability and objection. Requests concerning customer data are forwarded to the controller. Requests go to compliance@qualimetrix.nl and receive a response within the statutory period.
Complaints
A complaint may be filed with the Autoriteit Persoonsgegevens, the Dutch supervisory authority, without first contacting Qualimetrix.
Draft text for legal review. Bracketed items require confirmation before publication. This is not legal advice.