In this Privacy Policy we will explain which personal data we collect and use, what the rights of our users are, for which purpose we use the information and more. We advise you to read this statement carefully. CYS is concerned about privacy issues and wants you to be familiar with how we collect, use and disclose personal information.


1. Introduction
2. Changes to this Privacy Policy
3. Users of our Privacy Policy

4. Rights of our users

5. Information we collect

6. How we use the information we collect

7. Information we share with third parties and partners

8. Cookies

9. Security

10. Data Retention

11. Safety of Minors

12. Exercising your rights or submit complaints



1. Introduction


CYS takes your trust and right to privacy seriously and processes as little personal data as necessary. We strictly adhere to the requirements of GDPR for European users and those whose information we receive under the EU-US Privacy Shield, by:

  • clearly state for what purposes we process personal data. We do this via our Privacy Policy and Cookie Policy;
  • restrict the collection of personal data to only use the personal data that is necessary for the purposes for which they are processed;
  • ask for explicit permission to process personal data in cases where your permission is required;
  • not to pass on your details to third parties, unless this is necessary to provide the requested service or when we are legally obliged to do so;
  • when we share your data, make agreements with third parties to ensure, among other things, that they are not used for other purposes;
  • take appropriate security measures to protect your personal data and also requirements of parties that process personal data on behalf of us;
  • respect your right to provide your personal information for inspection, correct or delete.

If you have any questions, please contact privacy@cys.group. By using our service and/or registering an account you agree to have read and understood our Privacy Policy as set out below.


About this Privacy Policy
CYS, Takkebijsters 3A, 4817 BL Breda, +31 (0)76 515 12 12, info@cys.group is the company responsible. Using ‘we’ in this Privacy Policy refers to CYS.

This Privacy Policy applies to all the products, services and solutions we offer. References to data in this Privacy Policy will refer to whatever data you use our services to collect, whether it be survey responses, data collected in a form, contact information or data inserted on a site hosted by us. Off course this is all your data with the associated rights. Reference to personal information or just information, means information about you personally that we collect as controller or for which we act as processor.


By providing personal data to us, you agree to the terms and conditions of this Privacy Policy. We hope this Privacy Policy helps you to get a great understanding of what we offer you, what you can expect from us and what we expect from you.

CYS has appointed a Data Protection Officer (DPO). You can contact us via the postal address Takkebijsters 3A, 4817 BL Breda, or by e-mail via privacy@cys.group.

2. Changes to this Privacy Policy

We may update this Privacy Policy from time to time by posting a new version online. You should check this page occasionally to review any changes. If we make any material changes, we will notify you by posting the revised Privacy Policy on our website. This helps you to always be aware of what information we collect, how we use it and under what circumstances, if any, it is disclosed.

If you have any questions about this Privacy Policy or our treatment of the information you provide us, please write us an email: privacy@cys.group.


3. Users of our Privacy Policy

This Privacy Policy provides relevant information for:

  • Our customers: you as an organization are customer at CYS by means of an agreement and you hold an account in which you can view data.
  • The end users: as an end user you have received access to the software from one of the customer of CYS. You don't hold the account but you have access and are able to see the data of this customer.
  • The respondents: you have received a questionnaire, survey, application or form from one of our clients with the software of CYS.
  • The visitors of our website: you are visiting our website because you want more information about our solutions in feedback or because you might be interested in becoming one of our customers.


What is our role?
CYS is both controller and processor:

  • Controllers: Organizations that are in possession of personal data or have outsourced the processing of personal data.
  • Processors: Organizations that process personal data and that have to deal with a storage of these data, the act to do this and the viewing thereof.


4. Rights of the users

Your rights
You have certain legal rights to obtain information about whether we hold personal information, to access personal information we hold and to obtain correction, update, amendment or deletion in appropriate circumstances. Some of these rights may be subject to some exceptions or limitations.

We will respond to your request to exercise these rights within a reasonable time and in all cases within 30 days of receiving a request.

Rights containing your personal data:
- Right of inspection
- Right to restrict processing
- Right of rectification
- Right to erasure (Right to be Forgotten)
- Right to object to processing
- Right to withdraw consent
- Data portability right


Important information about your rights for our customers 
In relationship to the data of our customers, we are the controller. Where you hold an account with any CYS, you are entitled to a copy of all personal data which we hold in relation to you. If you want to obtain a copy of your data or to request a restriction / limitation in how we use your data, please contact us via privacy@cys.group or your contact at CYS.

Important information about your rights for the respondents and the end users
In relationship to the respondents and the end users, we are the processors. When you've received a questionnaire, survey, form or application sent to you by an organization (a customer of CYS) or you are an end user in the account of our customer (using CYS software), you will need to reach out directly to that individual or organization to discuss managing, deleting, accessing, restricting access to or otherwise withdrawing consent for use of, the information which you provided to them in your responses. CYS does not control your response data and, accordingly, is not in a position to directly handle these requests in relation to that data. If you are having difficulties finding the right person or organization, you can contact us through our support team and we will try our best to help you.


Important information about your rights for the visitors 
Where you have visited our website and you want to exercise any of the above rights, please contact our support team via privacy@cys.group. Alternatively if your request is for the right to be forgotten as it relates only to our use of cookies, you can achieve this by clearing the cookies in your browser settings. Read more about cookies in our Cookie Policy.


5. Information we collect

Personal details do not only include name and address details, but also e-mail addresses, locations, ages, IP addresses, customer numbers. All data that can be traced back to a natural person is personal data. We can distinguish different types of information we might collect. In general:


Contact information
We register the following contact information:
- first and last name
- email address
- organization
- discipline
- language
- branche

You provide us with your contact information, by:
- using our services
- filling in a form on our website
- having an interaction with our sales or marketing team
- asking a question to our support team
- signing up for an event
- downloading an e-book or whitepaper
- subscribe to our newsletter

Usage information
We collect usage information about you whenever you interact with our websites and services by:
- when you visit our website or application
- what pages you visit
- your clicks on the pages
- your downloads on our site
- what language preference you have

For more information, please read our Cookie Policy.

Device and browser data
We collect the following information from the device and application you use to access our services:
- your IP address
- device type
- system and performance information
- browser type

Log data
We use log data, device and browser data for business purposes:
- to monitor abuse and troubleshoot
- to create new services, features, content
- to track behavior at the aggregate/anonymous level to identify and understand trends in the various interactions with our services
- to fix bugs and troubleshoot product functionality

Referral information
If you arrive at our website from an external source, we record information about the source that referred you to us by analytic cookies:
- which site have you visited that leads to us

For more information, please read our Cookie Policy.

Information from third parties and partners
CYS collects personal information or data from third parties, only when you give permission to those third parties to share your information with us or where you have made that information available online for public.

Registration information
When you use our services as a customer, we collect:
- first and last name
- username
- password
- email address
- organization
- discipline
- phone number
- language preference

Billing information
If you make a payment to CYS, we require you to provide:
- organization
- email address
- financial information

Account information
You can set various preferences and personal details in your Customer Feedback Monitor user account.

Cookies
You have agreed to the use of cookies on our website. For more information about the certain types of cookies we use, please read our Cookie Policy.


6. How we use the information we collect

CYS considers transparency about the use of personal information very important and will explain how we use the information we collect below.


How we use the information from our customers
The details of our customers are processed to enable the execution of an agreement and the provision of our services. In addition, we use personalized marketing to improve your browsing experience, to offer you personalized content and ads in your interest and to send information to you which we think may be of interest by e-mail or other means. You can always opt-out from direct marketing. We provide opt-out options in all direct marketing emails. If you do not wish to see personalized marketing content on the web related to our service, you can clear the cookies in your browser settings.


How we use the information from the respondents and the end users
These data are processed in commission and according to the instructions of our customers, after which they are made available again to the relevant customer. These data will in no case be used for any other purpose or provided to third parties, other than necessary for enabling our services or fulfilling a legal obligation.


How we use the information from the visitors of our website
We use personalized marketing to improve your browsing experience, to offer you personalized content and ads in your interest and to send information to you which we think may be of interest by e-mail or other means. When you leave your personal details via a form on our website, there is a possibility we will contact you by phone or e-mail to ask if we can help you. You can always opt-out from direct marketing. We provide opt-out options in all direct marketing emails. If you do not wish to see personalized marketing content on the web related to our service, you can clear the cookies in your browser settings.


7. Information we share with third parties and partners

We share your personal data with third parties if this is necessary for the execution of the agreement and to comply with any legal obligation. We also provide your personal data to third parties in a few other cases, but we only do this with your explicit permission.

We work with the following third parties:

1. Google Analytics
CYS uses Google Analytics to keep track of how visitors use the website and how effective the Google Adwords campaigns are.

The information thus obtained, including the address of your computer (IP address), is transferred to and stored by Google on servers in the United States. Read the Google Privacy Policy for more information. You can also find the Privacy Policy of Google Analytics here.

Google uses this information to keep track of how our website is used, to provide reports on the website to CYS and to provide its advertisers with information about the effectiveness of their campaigns.

Google may provide this information to third parties if Google is legally obliged to do so, or as these third parties process the information on behalf of Google. CYS has no influence on this.

CYS has not given Google permission to use Analytics information obtained through CYS for other Google services.

2. Hubspot
CYS uses Hubspot for marketing purposes such as subscriptions to the newsletter, the applications for an event and the downloading of e-books and whitepapers. Read the Hubspot Privacy Policy for more information.


8. Cookies

CYS uses different kind of cookies on our website like functionality cookies, analytics cookies, targeting cookies, preference cookies and marketing cookies. We would like to inform you about the cookies we use on our website. Which types and for what purposes, we make clear in our Cooky Policy.


9. Security

CYS values the trust that our customers place in us by letting us act as processors of their data. We take our responsibility to protect and secure your information very seriously. CYS takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. The CYS website uses a reliable SSL Certificate to ensure that personal data are well secured. All our systems make use of logical access security based on 'need-to-know'. In addition, we work according by the ISO 27001 guidelines for information security. Our processor agreement contains extensive information about the security of our feedback software.


10. Data Retention

We do not store data longer than necessary. This means that we keep  data as long as necessary to deliver the service you have requested or as long as necessary to comply with a legal obligation.

If you hold an account in our Customer Feedback Monitor we do not delete the data in your account, only on request and according to the instructions of the account owner. You as our customer are responsible for and control the time periods for which you retain this data. CYS can technically adjust with its own systems that the data will be automatically archived or deleted after a certain period of time. This is flexible and dynamic, so the storage restriction can be set differently for each project. In addition, CYS can also indicate at specific level which data must be exceeded.


11. Safety of minors

Our services are not intended for and may not be used by minors. We do not collect information of minors. Minors are individuals under the age of 16.


12. Exercising your rights or submit complaints

Where you have visited our website and you want to exercise any of you rights, or if you want to submit a complaint, please contact our support team via privacy@cys.group.

Of course we would be happy to help you if you have complaints about the processing of your personal data. If we can figure it out together, then you also have the right under the privacy legislation to submit a complaint with the Data Protection Authority of the Netherlands.