Privacy Statement AuditDirect

1. Controller

The controller for the processing of your personal data is:

AuditDirect
Van Leeuwenhoekstraat 132
7908 BN Hoogeveen, the Netherlands
Chamber of Commerce: 91987024
Email: rob@auditdirect.nl
Phone: +31 6 300 24 200

2. What personal data do we process?

We only process personal data you provide to us yourself, for example through the contact form, by email or by phone:

• First and last name;
• Company name and role;
• Phone number;
• Email address;
• Any other details you actively provide, for example in the description of your request (such as the standard or audit you need).

The website sets no cookies and collects no data about your browsing behavior. See also our cookie statement.

3. For what purposes do we process personal data?

• Matching: to assess your request and connect you with a suitable independent consultant or auditor.
• Contact: to call or email you where needed to deliver our services, for example to verify your request.
• Quotation process: to enable the selected consultant to make you a suitable proposal.
• Administration: to handle payments and statutory administrative obligations.

4. On what legal basis do we process data?

• Performance of the contract: processing is necessary to deliver the service you requested.
• Legitimate interest: to secure our website and services.
• Legal obligation: for data we need for our tax filings.

5. How is your form submission processed?

When you submit the contact form, your details are forwarded through our own server (hosted at Cloudflare) directly to our business email and as a notification to our phone (via Telegram). Your data is not stored in a database on the website and is not used for marketing profiles.

6. Sharing personal data with third parties

Sharing your details with a consultant is an essential part of our service as an intermediary. We never sell your data and never share it with parties unrelated to your request.

• Independent consultants and auditors: once we have found a suitable match, we share your contact and project details with that consultant. From that moment on, that party is an independent controller for the further processing related to the quotation and the engagement.
• IT service providers: parties that host our website and handle our email and messages (Cloudflare, Google, Telegram). Where data is processed outside the EEA, this happens under appropriate safeguards such as the EU-US Data Privacy Framework or standard contractual clauses.
• Accounting office: for processing our financial administration.

Where required, we conclude data processing agreements with parties that process your data on our behalf.

7. How long do we keep personal data?

• Requests and matches: at most 2 years after the last contact, unless a lasting client relationship develops.
• Financial administration: 7 years (statutory tax retention obligation).

8. Accessing, correcting or deleting your data

You have the right to access, correct or delete your personal data, the right to object to processing, and the right to data portability. Send your request to rob@auditdirect.nl. To make sure the request was made by you, we may ask you to identify yourself. We respond as quickly as possible, within four weeks at the latest.

9. Security

AuditDirect takes the protection of your data seriously and takes appropriate measures against misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. All connections to the website are encrypted via HTTPS. If you believe your data is not properly protected or you see signs of misuse, contact us at rob@auditdirect.nl.

10. Right to complain

You can file a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens, via autoriteitpersoonsgegevens.nl.