Privacy statement

Legal name

CDCT

Registered address

Keizerskroon 64, 3353 XR Papendrecht, NL

KvK number

87669234

VAT / BTW number

NL004466212B92

Email

[email protected]

• Checkout and invoice: name, address, email address, company name and VAT number. We use them to deliver the access code, issue the invoice and keep our accounts. Basis: performance of the contract and our legal duty to keep tax records.
• Access code: the code, with the company name and VAT number of the order and the LEI the code is bound to. We use them to sign you in and to link the code to its payment. Basis: performance of the contract.
• Support: the emails you send us. We use them to answer you. Basis: performance of the contract and our legitimate interest in helping customers.
• Security and logs: IP addresses and technical request data. We use them to run the service and to block abuse, such as repeated failed sign-ins. Email addresses and access codes are masked in logs. Basis: our legitimate interest in a secure, working service.

Workbook content is processed on the customer's behalf and is governed by the DPA.

• Billing details are stored in the checkout record and kept with the invoice for seven years, as Dutch tax law requires. Access codes from paid orders are kept for the same period.
• Checkout records of orders that were never paid are deleted after 30 days.
• Application warning and error records are kept for 14 days and then deleted.
• Server logs are rotated and overwritten.
• Support emails are kept for as long as needed to handle your request.

• Hostinger hosts the server (VPS, Germany).
• Cloudflare carries all traffic between your browser and the server, and forwards emails sent to our support address (United States; EU-US Data Privacy Framework and Standard Contractual Clauses).
• Mollie processes payments.
• Resend sends our emails: access codes, invoices and, on request, packages (United States; EU-US Data Privacy Framework and Standard Contractual Clauses).
• GLEIF (Switzerland, adequacy decision) and VIES (European Commission) receive identifiers only: LEI codes and VAT numbers we check.

See the cookie statement.

You can ask for access to, correction or deletion of your data, restrict or object to its processing, and ask for a copy to take elsewhere. Email [email protected]; we reply within one business day. You can also complain to the Dutch Data Protection Authority, Autoriteit Persoonsgegevens (opens in a new tab).