How we protect your personal information
This Privacy Policy explains how we protect your personal information and with that, also follow the law. It’s here to give you comfort and show that we’re doing things right according to the rules, especially in regards to the GDPR, Europe’s regulation on privacy protection. Anyone who wants to check on how we’re handling data can use this policy to see that we’re on track.
Introduction
True Critique Club is a part of Stars and Stories®. We’re all about getting people to create and share content on different websites and apps. To do our job, we collect information from our suppliers, clients, community members, and our own team. We use different computer programs to handle this info. Whatever rules we follow at Stars and Stories®, we also follow them at True Critique Club.
Definitions
Here’s who’s who in this policy:
- “Stars and Stories®” is our official company name, Stars and Stories BV, and this includes any related companies that follow the same data protection laws.
- “True Critique Club” is what we call our business when we operate under that name.
- “Data Subject” is anyone whose personal info we have.
- “Data Controller” is us, or anyone who decides how and why personal info is used.
- “Data Processor” is a person or company that uses personal info for us but doesn’t decide how to use it.
- “Data Breach” is when someone gets unauthorized access to private info they shouldn’t have.
Data Protection Officer
We’ve got Mohamed El Sioufy as our Data Protection Officer. He’s in charge of making sure we handle your personal info correctly, following the rules in this policy and the GDPR. Mohamed is registered with the Dutch data protection authorities (look him up with number FG001400). Got questions? Email him at info@truecritiqueclub.com.
Data Protection Policy
At True Critique Club, we promise to handle your data the right way, following GDPR rules. This means we:
- Use data fairly and by the book.
- Only use it for reasons that are allowed by law.
- Don’t ask for more info than we need.
- Make sure it’s correct and current.
- Don’t keep it for longer than we have to.
- Respect your rights over your data.
- Keep it safe from unauthorized access or loss.
Why we need personal information
We collect information about our members, like their names, email addresses, and where they live, so we can pick the right people to try out new products. When you sign up to test something, we might ask you some specific questions. This helps us figure out if you’re a good match for the product. Sometimes, these questions might be about more personal things, which are considered sensitive under the GDPR rules.
We always ask for your permission before using your personal info. The only exception is if we need your info to fulfill a job contract. We promise to keep your personal details safe and won’t share them with others unless you say it’s okay.
We’ll always tell you why we need your info before you agree to give it to us. We make sure you understand everything and have full access to what you’re agreeing to. If we ever want to use your info for something different than what you originally agreed to, we’ll ask for your permission again.
Remember, you can always change your mind and ask us to stop using your info at any time.
If you want to read more about the what, how and, why of your data, here’s the link to our privacy statement.
Sensitive Personal Data
We might need to use personal details like your gender, religion, or sexual orientation sometimes. Don’t worry, we’ll always ask you directly and make sure we have your clear permission before using this kind of information. We promise not to use these sensitive details without your okay, and we only collect what we absolutely need.
Processing Overview (Register)
We keep a special list that tracks all the personal information we use. This list helps us remember why we needed your info and what we’re using it for. It also includes details about our agreements on how we handle this data, making sure we’re doing everything by the book.
Rights of Data Subjects
At True Critique Club, we really respect your rights over your own information. This means you always have the right to check out the info we have on you, make sure it’s correct, and you can even ask us to forget all about you and erase your details. We’re here to help with these requests.
Right to Access Information
If you want to see the personal information we have about you, just send us an email at info@truecritiqueclub.com. We’ll try to get back to you as quickly as we can, definitely within 30 days, to let you see what we’ve got.
Keeping Your Information Accurate
We try to keep all your information accurate and up-to-date. If anything changes, like your address or phone number, please let us know. If you find something wrong in your info, you can ask us to fix it. Sometimes we might need to keep certain details for legal reasons, but we’ll always work to correct any mistakes.
Right to Be Forgotten
You can ask us to erase all your information from our records. Just send your request to info@truecritiqueclub.com or through your account on our site. We’ll delete or anonymize your info once we’ve sorted out any legal stuff we need to finish first.
Keeping Your Data Safe
We take a lot of steps to keep your personal information safe. Our team is trained to respect and protect your privacy. We use things like SSL Certificates to secure our websites and tools, encrypt your data in our software, and protect our passwords with extra security like 2-factor authentication. We make sure the security we use matches the type of data and how we’re using it, mostly storing your info in secure cloud systems.
Working with External Processors
We make sure that any outside companies we work with, like cloud storage providers or website hosts, follow our privacy rules and the law. We have agreements in place with these companies to ensure they handle your information just as carefully as we do.
Secure Data Destruction
When it’s time to get rid of data we no longer need, we do it very carefully and securely, following the best methods available at that time. This is to make sure that your information is permanently and safely erased.
Data Retention Periods
We keep your information for different lengths of time, depending on what we need it for and what the law says. Each department in our company knows how long they should keep data. We also might need to hold onto certain information because of legal reasons, like ongoing investigations. Once we don’t need your data anymore, and it’s time to delete it, we’ll do so.
Handling Data Breaches
If there’s ever a security problem where someone accesses data they shouldn’t have, we have a plan to deal with it. This includes telling the Dutch data protection authority, Autoriteit Persoonsgegevens, about the breach within 72 hours. We take these situations very seriously and act fast to fix them.
Compliance Concerns
If you think that we haven’t followed our own privacy rules, or we’re not doing things the right way under the GDPR laws, you can reach out. Just email our Data Protection Officer at info@truecritiqueclub.com, and we’ll look into it.