1. Scope and Purpose of Processing
  2. Data Controller and Data Processor Roles
  3. Types of Data Processed
  4. Subprocessors
  5. Security Measures
  1. Data Subject Rights
  2. Data Breach Notification
  3. Governing Law and Jurisdiction
  4. International Data Transfers
  5. Confidentiallty
  6. Amendments to the DPA

TL;DR:

We only use your data to provide and support our service as described in the Terms of Use.

1 / Scope and Purpose of Processing

AvenidaHQ processes personal data solely for providing and maintaining the financial administration service, enabling you to comply with appropriate tax laws. This includes data entered by users, such as contact and financial information.

TL;DR:

You control your data, and we process it only as needed to provide the service.

2 / Data Controller and Data Processor Roles

Under GDPR, you, the user, are the “Data Controller,” determining the purpose and scope of the data processed. AvenidaHQ B.V. acts as the “Data Processor,” processing data only within the scope permitted by this agreement and solely for service provision.

TL;DR:

We process account, financial, and anonymous usage data; no other types of data are collected or processed.

3 / Types of Data Processed

AvenidaHQ processes only the following types of data:

  1. User Data:
    Email, name, and other login credentials.
  2. Financial Data:
    Information entered into the platform relevant to property rental finances.
  3. Usage Data:
    Data related to how you interact with the platform (in anonymous form for product improvements).

TL;DR:

We work with trusted third parties to help deliver our service. They meet GDPR standards, and we may update them as needed.

4 / Subprocessors

AvenidaHQ may engage third-party subprocessors (e.g., hosting, data analytics, and payment services) to assist in the delivery and support of the service. AvenidaHQ ensures that all subprocessors comply with GDPR standards, implementing adequate data protection and security measures. A list of current subprocessors will be made available upon request and may be updated periodically. AvenidaHQ reserves the right to add or change subprocessors as necessary to maintain or improve the service.

TL;DR:

We secure your data with robust measures to keep it safe from unauthorized access.

5 / Security Measures

AvenidaHQ takes reasonable technical and organizational measures to protect your data, including encryption, regular security assessments, and secure access protocols. We aim to safeguard all personal data against unauthorized access, loss, or disclosure.

TL;DR:

You have full rights over your data; contact us for access or changes.

6 / Data Subject Rights

Users have the right to access, correct, delete, or restrict the processing of their personal data. Any requests can be submitted to AvenidaHQ’s customer support, which will respond within the GDPR-mandated timeframes.

TL;DR:

If there’s a significant data breach, we’ll inform you as soon as reasonably possible and provide guidance to protect your data.

7 / Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to the rights and freedoms of users, AvenidaHQ will notify affected users promptly and within a reasonable time after becoming aware of the breach. This notification will include relevant details and guidance to mitigate potential risks. AvenidaHQ will also comply with all legal reporting requirements to regulatory authorities as mandated by the GDPR.

TL;DR:

Dutch law applies to this agreement, and disputes will be handled in the Netherlands.

8 / Governing Law and Jurisdiction

This DPA is governed by Dutch law. Any disputes will be handled in the competent court in the Netherlands, unless otherwise mandated by applicable regulations.

TL;DR:

If we transfer your data outside the EEA, we’ll ensure it’s protected in line with GDPR.

9/ International Data Transfers

AvenidaHQ may transfer personal data outside the European Economic Area (EEA) if necessary for service provision. In such cases, AvenidaHQ ensures that these transfers are made in compliance with GDPR requirements, using adequate safeguards such as Standard Contractual Clauses (SCCs) or other legally recognized transfer mechanisms.

TL;DR:

Only authorized personnel handle your data, and they’re bound to confidentiality.

10 / Confidentiality

AvenidaHQ ensures that any personnel involved in data processing are bound by confidentiality. Data will not be disclosed to third parties unless legally required.

TL;DR:

We may update this DPA as needed, and we’ll inform you of major changes.

11 / Amendments to the DPA

AvenidaHQ reserves the right to update this DPA as necessary to comply with legal requirements or operational changes. Users will be notified of significant changes, and continued use of the service constitutes acceptance of the new DPA.