Privacy statement

The controller responsible for personal data collected through prevent-x.nl, the sign-up flow and the PreventX portal is:

Finding Solutions (private limited company)
Bosdel 54 box 44
3600 Genk, Belgium
Company number 1040.797.924
Email: info@prevent-x.co

PreventX is part of Finding Solutions. References to PreventX in this statement mean Finding Solutions.

Send questions about this statement or your personal data to the email address above.

• Contact and request details: name, email address, company name, telephone number (where provided), number of employees, industry, selected subject, preferred contact time and the explanation you enter in the request or contact form. For specialised requests, we also process your role and region. For Werfpoort, this also includes the construction-site location, estimated project value, planned timing, current attendance registration and composition of the site team. For Managed HSE, we also process what support you need.
• Account and subscription details: name, email address, company name, account characteristics, the selected Lite, Plus or Done plan, and the status and term of the subscription.
• Payment details: the Stripe customer and subscription reference, payment status and transaction details required to manage the subscription. You enter your full card details directly with Stripe; they are not stored in the PreventX portal.
• Portal data: information users enter about the organisation, locations, activities and occupational risks, plus documents and photographs they upload.
• Website usage data: only when you give consent. We place no analytics or marketing cookies without consent.
• Technical data: server logs containing an IP address and timestamp, required for security and to limit misuse.

We do not ask for special-category personal data in free-text fields on the website. Do not share health data there. Where PreventX processes personal data in the portal on a customer's behalf, the parties set out their respective responsibilities in an additional data processing agreement.

• Responding to your request and preparing a quotation. Legal basis: performance of a contract or steps prior to entering into a contract (Article 6(1)(b) GDPR).
• Managing your account, subscription and payment and delivering our services when you become a customer. Legal basis: performance of the contract.
• Security and misuse prevention. Legal basis: legitimate interests (Article 6(1)(f) GDPR).
• Analysing website use. Legal basis: your consent (Article 6(1)(a) GDPR), which you may withdraw at any time.

We retain requests that do not lead to an assignment for no more than 24 months. We retain account, subscription, payment and portal data for as long as necessary to provide the service and afterwards in accordance with applicable statutory retention periods. We keep server logs only briefly, generally for no more than six months.

We do not sell your data. We do engage processors that help us provide the service, such as hosting, email and database providers. Stripe processes card registration, subscriptions and payments. We put appropriate data-protection arrangements in place with our processors. Data is processed within the European Economic Area. If data is exceptionally processed outside the EEA, this takes place on the basis of a valid transfer mechanism.

• access to the personal data we process about you;
• rectification of inaccurate personal data;
• erasure, also known as the right to be forgotten;
• restriction of processing;
• objection to processing based on legitimate interests;
• data portability;
• withdrawal of consent you previously gave.

Send a request to info@prevent-x.co. We respond within one month. If you disagree with our response, you may lodge a complaint with the Autoriteit Persoonsgegevens, the Dutch Data Protection Authority.

Functional cookies are required for the site to work and are always active. We place analytics and marketing cookies only after you give consent through the cookie notice. You can change or withdraw your choice at any time.

We amend this statement when our services or applicable rules require it. The date at the top shows the latest revision. Please also read our terms and conditions (in Dutch).