Privacy statement websites

View the privacy statements of our solutions on Fortes Projectflow and Fortes Change Cloud.

By using one of our public websites, you agree to the use of your data as described in this privacy statement. We process personal data exclusively in accordance with the General Data Protection Regulation (GDPR).

The personal data you entrust to us through forms on our websites are used solely for the purposes specified in the respective form. For example, you may provide your data to request information, sign up for a trial subscription, subscribe to our newsletter, or download a whitepaper.

In addition, general visit data is recorded on our websites. We may register your computer's IP address, the time of request, and data sent by your browser. This data is used for statistical analysis of website visit and click behavior. We also use this data to optimize the website's functionality. The data is not provided to third parties.

We also use cookies. A cookie is a simple small file that is sent along with the pages of our websites and stored by your browser on your computer's hard drive. We use cookies to remember your settings and preferences. You can disable these cookies via your browser; for an extensive explanation, see this article from the Consumers' Association.

Furthermore, we use Google Analytics to track how users use our website and how effective our advertisements are in Google search results. This information is also transmitted to Google servers in the United States. You can read the privacy policy of Google Analytics here.

Our site also includes buttons to share pages on the social networks of LinkedIn, Twitter, and Facebook. The button and its associated code are provided by LinkedIn, Twitter, and Facebook themselves. This code, among other things, places a cookie.

When opening our websites, you can choose to only place necessary cookies, or also analytical cookies and/or tracking cookies.

If you have a relationship with our company, you have the option, upon written request, to view your personal data. If the overview provided by us contains inaccuracies, you can request in writing to have the data changed or deleted. Additionally, you can inform us in writing if you do not wish to be contacted with information about our products and services, by notifying us at the following address:

Valkenburgseweg 89
2223 KC Katwijk (ZH)

Updating privacy statement

We reserve the right to amend this privacy statement. Changes will be published on this website.

Privacy statement for our online software

Which Fortes products does this statement apply to?

This privacy statement applies to our online products: Milestones, FortesDashboards, and Procs. It also applies to customized online software hosted for specific clients. Throughout this document, these products and software are referred to as "our software".

Products and software running on your own environment or hosted by other parties are not covered by this statement.

In this privacy statement, we distinguish between two types of personal data:

• Personal data collected from you when you purchase or use our software. Fortes is the controller for these data. We refer to these data as "your personal data" throughout the document.
• Personal data entered by you into our software and processed on your behalf. You, as the customer, are responsible for these data, and Fortes acts as the processor. We refer to these data as "your company data" throughout the document.

Your personal data

Before purchasing our software or subscribing to our services, you must agree to our terms and conditions, which describe, among other things, your and our rights regarding the collection and use of personal data in general.

What information do we collect?

We collect the following data from you after you have purchased our product or software:

• Contact information: Name, email, physical address, phone number.
• Financial data: Your bank details and business identification (Chamber of Commerce number, VAT number), and any other relevant data.
• Communication data: We log your IP address and information about your device.
• Usage data: We log statistical information about your use of our software.
• Support data: When you contact our help desk, we may ask you to share information with us, including contact details, authentication data, or other data we need to answer your support request.
• Cookies: We use functional cookies in our software. 

How do we use the collected information?

The information we collect is used for specific purposes. We will not use the information for other purposes.

• Contact information: We use your contact information to send messages or documents related to the software you have purchased. Additionally, we may use your contact information to inform you about other Fortes products and services.
• Financial data: We use your financial data to process your payments and to comply with our legal obligations regarding invoicing.
• Communication data: We collect this information to improve our software and to secure our platform.
• Usage data: We collect this information to improve our software and to analyze incidents.
• Support data: We use this information to answer your support request.
• Cookies: We use functional cookies to improve the functionality within our software or to enhance your user experience.

Your business data

Business data is the information that you enter into our software yourself. For this data, you are the controller, and Fortes is the processor. Your and our rights regarding this data are laid down in a data processing agreement, which you will receive when purchasing a license or activating a subscription.

What can Fortes do with my business data?

Without your permission, Fortes employees are prohibited from viewing or using your business data. You can explicitly give us permission, for example, to answer a support request or to fix a potential software error. Every access to your data is logged, and employees are bound by our internal security policy. We will never export or modify business data without explicitly asking for your permission again.

How do I control access to my business data?

Within our software, you can create and delete users and assign more or fewer rights to these users. This allows you to ensure that users only have access to the data relevant to them. You should ensure that user accounts are personal and not shared among multiple people.

What about my data if I export it or link it to other systems?

When you establish a connection with your business data via our API or any other method enabled in the software (such as through data replication or import/export), the further processing of this business data falls directly under your own responsibility.

When your business data is synchronized with an external application (such as Exact Online or Twinfield) via our software, you have control over the user account with which this data is exchanged (and you can also stop the exchange). You should also ensure that you make agreements with the linked third party regarding the processing of your business data.

How long do we keep the data?

We store your business data for as long as you have a valid license, active subscription, or maintenance contract for our software. After termination of the license, subscription, or contract, your business data will no longer be accessible to you. We retain your business data for 60 days after termination (during which you may potentially reactivate the software), after which it will be permanently deleted. You are responsible for exporting and securing the data that is important to you before termination, using the software's provided functions for this purpose.

Where are the data stored?

Fortes utilizes Microsoft's infrastructure for hosting its software. The primary location where our software operates is in the Netherlands. In the event of disruptions at the data center, it is possible that your business data may be temporarily relocated to other locations, initially in Ireland, and exceptionally elsewhere in the European Union.

Security Incidents

If we become aware of or suspect that your business data has been accessed, used, altered, or deleted in an unauthorized manner, we will notify you as soon as reasonably possible about the incident.

Additionally, we will assist you in minimizing the impact and scope of the incident and provide necessary cooperation in any investigation into the incident.

Alle Data

This chapter discusses topics that apply to both your personal data and your business data.

Jurisdiction

Jurisdiction is based on Dutch law.

Subcontractors

Fortes maakt gebruik van onderaannemers, waarbij Fortes als verantwoordelijke of verwerker ervoor zorg draagt dat de aard, doel en wettelijke grond van elke verwerking door haar onderaannemer is gewaarborgd. Fortes heeft hiertoe verwerkingsovereenkomsten afgesloten met haar onderaannemers waarin we onder meer afspreken dat de verwerking plaatsvindt conform ons beleid en de benodigde beveiligingsmaatregelen worden getroffen.

Information Requests from Government Agencies

We will not share your data with third parties (other than subcontractors) unless at your request or based on a legal obligation or court order.

Want to Learn More?

If you have any additional questions after reading this document, please direct them to info@fortesgroup.com.