Privacy statement OBI4wan

In this privacy statement you can read how OBI4wan B.V. (“OBI4wan”) handles the processing of personal data within the context of the General Data Protection Regulation (GDPR) with regard to its own processing of personal data, as well as for the processing of personal data on behalf of its customers.

OBI4wan is located at (1506 MA) Zaandam, Korte Hogendijk 2. OBI4wan is registered in the Business Register of the Dutch Chamber of Commerce under 53021029.

This Privacy Statement applies to all users of our services and visitors to our website. This privacy statement explains how we collect, process and use personal data about you.

OBI4wan is a private limited company with its registered office at Korte Hogendijk 2, 1506 MA Zaandam in the Netherlands and registered with the Chamber of Commerce under number 53021029.

OBI4wan offers software solutions with the following names (OBI Brand Monitor, OBI Engage and OBI Bots) for brand monitoring, centralized digital customer service communication related to webcare, messaging, social media publishing and monitoring and chatbots.

The goal of OBI Brand Monitor is to enable customers to learn more about their brand, their consumers, their competitors, and act with greater confidence in their marketing and communications. For the purpose of OBI Brand Monitor, OBI4wan obtains data through search queries, web crawling or by contracting directly with content providers to access the data. This information is then collected, indexed and stored in the database to assess current trends in the brand image and enable the customer to take action on these trends. OBI4wan offers clients access to its database, as well as analyzes of the data in that database.

The goal of OBI Engage is to centralize customer service communications between customers and organizations. OBI Engage includes webcare, messaging, social media publishing and monitoring functions. It combines the social media accounts owned or managed by organizations in one tool. This enables organizations to send public and private messages to customers, publish content and manage social media accounts.

Based on the organization’s permission, OBI4wan collects the information related to the social media accounts and messaging applications and centralizes it in its solution so that it is only available to the organization itself. OBI Engage also integrates brand monitoring capabilities as part of OBI4wan’s ongoing process to merge OBI Engage and OBI Brand Monitor products into one.

The goal of OBI Insights is to help customers gain insights from their data. A team of professional media analysts help companies with insights into, among other things, the impact, reputation, target group, media value and KPIs of their organization.

All insights, conclusions and advice are presented clearly and clearly in reports. Infographics, key take-outs, management summaries and the corporate identity of the customer organization bring the data to life. In this way, the customer can immediately share the information with its stakeholders.

The goal of OBI Bots is to help customers automatically answer customer questions 24/7 through digital channels combined in one solution. This includes live chat, messaging and social media accounts (Facebook messenger, Whatsapp, Twitter DM and custom channels).

These automatic answers are established by the organization and the chatbot is trained to recognize questions based on previous conversations by the organization itself, so that it can perform its customer service functions. Note that the employees of OBI4wan’s customers can also create and exchange message content via OBI Chatbot.

OBI4wan collects information, including personal data, from a large number of sources in order to provide the above services to its customers. OBI4wan collects two types of information, namely publicly available information from the public domain and private information from a specific customer.

Publicly available information is information that has not been obtained directly from the data subject but has been expressly made public by the data subject on the Internet by publishing it on public websites, internet forums and social media platforms. This publicly available information is obtained through searches, web crawling, or by contracting directly with content providers to access the data.

This publicly available information may include the following personal data:

• Identifiers: name, username, handle or other identifier;
• Content Information: the post content published under that name, username, avatar or other identifier (e.g., comments, expressions, opinions, posts, etc.);
• Audio/visual information: profile picture or other images or videos that have been posted or interacted with;
• Location information: location (level of detail depends on what is provided by data source). (is consciously activated by the user himself)

Private information is information obtained by the customer under Article 5 of the GDPR from the data subject and for which OBI4wan only acts as the processor of that information on behalf of the customer. This information is used exclusively to support that specific customer with its customer communication through a SaaS platform from OBI4wan.

This private information may contain the following personal data:

• Identifiers: name, username, handle, or other identifier;
• Content information: the content published under that name, username, handle, or other identifying information (e.g., comments, expressions, opinions, messages, etc.);
• Audio/visual information: profile picture or other images or videos that have been posted or interacted with;
  Demographic information: interests and gender;
• Location information: location (level of detail depends on what is provided by data source). (is consciously activated by the user himself)

OBI4wan collects, processes and stores both publicly available information and private customer information from, among others, the following platforms and websites:

• Social media platforms
• Review websites
• forums
• Blogs
• News websites

In addition, OBI4wan also offers its customers, under a paid license, content from newspapers, publishers and platforms:

OBI4wan uses the information collected, including any personal data, to provide the services mentioned in paragraph 3 to our customers.

Our legal basis for this type of data processing is that we have a legitimate interest in operating our business and providing our services to our customers, including providing technology that enables our customers to act with greater certainty in a way that is easy and user-friendly. is..

However, the legal basis for our processing of data may also be where we have your consent (for example where consent is required to send certain marketing communications) or where the processing is necessary to comply with our legal obligations (for example where we receive requests from regulatory authorities ).

Information that OBI4wan collects from public sources is kept for a period of 3 years. This gives OBI4wan customers the opportunity to compare information with previous periods and to make analyzes based on historical data. After a period of 3 years, this data is permanently deleted from our databases and not collected again.

The private information that OBI4wan processes for its customers is kept in accordance with the customer’s information retention period. The customer determines how long the information should be kept and if the customer terminates its agreement with OBI4wan, all private information of the customer is permanently removed from all systems and databases of OBI4wan.

The only possible exception to the aforementioned retention periods is if OBI4wan is legally obliged to keep this information for longer or if a data subject requests to delete his/her information.

For the processing of information and to support customers, it is necessary that employees of OBI4wan have access to the collected and stored information. It is OBI4wan’s policy to limit the number of employees with access to the information to a minimum. In addition, all OBI4wan employees have signed a confidentiality agreement.

The collected information is only made available to customers by OBI4wan through its SaaS products. The publicly available information may be shared with all customers. The private information is only made available to the customer for whom the information was collected and is never shared with third parties.

OBI4wan uses so-called sub-processors to collect, process and store information. These sub-processors are part of the production process and it is therefore technically necessary for these parties to gain access to the information. However, the sub-processors are not entitled to view or use the information for their own purposes. OBI4wan has agreements with all its sub-processors in which the use of this information is protected from use and misuse.

OBI4wan complies with the legislation as laid down in the General Data Protection Regulation (“GDPR”) and, as a processor of personal data, also makes every effort to protect the rights of the data subject.

OBI4wan has appointed a Data Protection Officer (“DPO”) who supervises the application and compliance with the General Data Protection Regulation within the organization.

OBI4wan is ISO 27001 certified for its information security. OBI4wan’s information security management system is documented and audited annually by an independent third party.

OBI4wan provides its services under the terms of service of the social media platforms from which the information is obtained. OBI4wan does not change the messages and passes on the information unedited to its customers.

OBI4wan also does not use algorithms to make automated decisions about you that violate applicable law or in any way that has significant legal effect.

OBI4wan uses two secured Dutch data centers for the processing and storage of the information. In view of the large amount of data, OBI4wan also uses cloud services from renowned providers such as Google Cloud and Amazon Web Services. All personal data is stored and processed within the European Economic Area.

You have rights in relation to your data under applicable data privacy laws. Subject to applicable law, you can:

• request access to the Personal Data we hold about you;
• ask us to update, correct, delete, opt-out of sale or block your Personal Information;
• request that we stop using any personal data we hold about you;
• lodge a complaint about our use of your Personal Data with the data protection authority of the country in which you reside. If you have a complaint about our data practices, we hope you contact us first so we have a chance to resolve your concerns;
• not be discriminated against for exercising your privacy rights.

To exercise any of these rights, ask us questions, raise concerns, or request a copy of this statement in a different format, please submit a verifiable request to us at:

email us at privacy@obi4wan.com;

or

call us on (+31)85-210 5060

Only you, or a person you have authorized to act on your behalf, may make a request regarding your Personal Data. If you make a request through an authorized agent, the agent must provide a signed written consent to act on your behalf, and you may also be required to independently verify your identity with us.

To protect your personal information, we may ask you to provide additional personal information so that we can verify your identity. Any information you provide will only be used as part of the process to confirm your identity and complete your request. To protect your personal information, if we are unable to verify your identity, we will not be able to comply with your request.

After you submit a request, you can expect an initial response from the OBI4wan Privacy Team within a reasonable time, depending on where you live. Except where the law does not require or permit us to do so, any information we hold about you will be provided in an easily accessible and portable format once we receive your verifiable request. We will adhere to the appropriate response timeline that applies to you, depending on where you live. We may request additional time in accordance with applicable law if necessary.