Privacy statement

Who we are

SamenParaat and Mijn NoodCheck are services of Infiliate B.V., based in Lelystad, the Netherlands, Chamber of Commerce 99308770. Send privacy questions to info@samenparaat.nl.

Who this statement is about

Residents who take the 72-hour check or use Mijn NoodCheck, municipal staff who use the municipal portal, and anyone who sends us a message through the contact form.

What residents fill in

The 4 digits of your postcode, your household composition, optionally your age group, and which emergency supplies and arrangements you already have. We do not ask for your name, address or phone number, and the check does not ask for an email address. Your answers are stored under a random personal code so you can update them later. We only keep an encrypted (hashed) version of that code.

What stays on your own device

Your personal list and your emergency plan are stored on your own phone or computer. We cannot see them. ‘Delete my data’ in the app removes them.

What your municipality sees

Your municipality only sees totals: percentages per topic, per district and per group. Results appear only from 20 unique households; districts and groups with fewer than 20 households are never shown separately and cannot be derived from the totals. If you take the check again, only your latest submission counts. Your municipality can never see your answers. Municipalities can compare their totals with the average of at least 5 other municipalities, in which no municipality or resident can be identified.

Account (optional)

If you create a free account in Mijn NoodCheck, we store your email address so you can log in with a login link and link your list to your account. We do not share this email address with your municipality. You can delete your account yourself in the app with ‘Delete my data’, or via info@samenparaat.nl.

Reminder (optional)

If you ask for a reminder, we store your email address separately from your answers. You get a confirmation with an unsubscribe link right away; you can also unsubscribe in the app. You get one email when your municipality measures again, and we then delete your email address.

Municipal staff

For the municipal portal we store the name and email address of the contact person and the email address of whoever logs in. Logging in uses a one-time login link; we do not store passwords. For invoices we store the municipality's billing details.

Contact form

If you send us a message, we receive your name, organisation and email address, and if you fill them in also your role, phone number and message, by email in order to answer your question. To limit abuse we briefly keep an encrypted (hashed) version of your IP address in memory; we do not store it.

Who is responsible

• For the 72-hour check and the reminder, your municipality decides why and how data is processed. Infiliate processes that data on behalf of your municipality, under a data processing agreement.
• For the optional Mijn NoodCheck account, the municipal portal and the contact form, Infiliate is the controller.

Why we use data

• The check: to give you a personal list and to show your municipality anonymised totals, so it can target its information about emergency preparedness. Taking part is voluntary.
• Account and reminder: because you ask for them. You can stop at any time by deleting your account or unsubscribing.
• Municipal portal and invoices: to perform the agreement with the municipality and to meet legal bookkeeping obligations.
• Contact form: to answer your question.

Who we share data with

We do not sell data or use it for advertising. We work with these suppliers, who only process data on our behalf:

• Supabase: database and login. The data is stored in Frankfurt, Germany (EU).
• Clever Cloud (France): running the website.
• Scaleway (France): sending email, such as login links, confirmations and reminders. Emails are processed in Paris; nothing is stored or backed up outside the EU. The content of an email is deleted as soon as it has been sent. Sending data, such as your email address, the time and whether the email was delivered, is kept by Scaleway for as long as we use the email service. At our request, Scaleway deletes this data earlier.
• Mollie and Moneybird (the Netherlands): only for payments and invoices of municipalities, not for residents' data.

Cookies

We use no tracking cookies and no advertising or analytics cookies. We only use cookies needed for the service to work: to keep you logged in, to link the app on your home screen to your list, for the example environment and to remember your display choice in the portal. These do not require consent.

How long we keep data

• Answers to the check: as long as your municipality uses SamenParaat. If a trial ends without a subscription or a subscription ends, we delete the answers within 90 days. During that period your municipality can request an export of the totals.
• Encrypted IP address for the check: 7 days, then automatically erased.
• Email address for a reminder: until the reminder has been sent or you unsubscribe.
• Mijn NoodCheck account: until you delete it.
• Municipal staff data: as long as the municipality uses SamenParaat, then deleted within 90 days. We keep billing data for 7 years because the law requires it.
• Messages through the contact form: as long as needed to handle your question, and no longer than 2 years.

Security

Residents' and municipalities' data is stored in the EU and travels encrypted over the internet (HTTPS). Each municipality only has access to its own totals. Residents and staff log in with a one-time login link, without a password. We do not ask for more data than needed.

Your rights

You can view and change your answers in the app; ‘Delete my data’ removes your answers, your account and everything on your device. You can also ask us to access, correct, delete or transfer your data, or object to its use. Email info@samenparaat.nl; we respond within one month. If your request concerns the check, we coordinate it with your municipality. Because we do not store names with answers, we need your personal code for this. If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes

If we change how we process data, we update this statement and the date below.