In some cases, our customers process personal data using the Montr reporting app or the Emergency Button. The General Data Protection Regulation (GDPR) defines personal data as "all information about an identified or identifiable natural person" - meaning information that either directly concerns someone or can be traced back to them.
Privacy by design
In designing and developing our applications, we have always applied privacy by design principles. This means that protection of personal data is built into products and services from the outset, and data is not retained longer than necessary for the purpose of processing.
Privacy by default
Our products and services are configured with privacy-friendly default settings. Technical and organisational measures are in place to ensure that, by default, only personal data strictly necessary for the specific purpose our customers wish to achieve is processed.
Retention periods
Retention periods are set by our customers themselves, in line with their processing purposes.
Where is data processed?
Within the European Economic Area (EEA) - specifically in the data centre of a well-known cloud computing platform in Noord-Holland, the Netherlands.
Data processing agreement
Where customers process personal data, we enter into a data processing agreement with them. Montr has also committed to the municipal standard data processing agreement. See this article for more information. We also provide customers with the building blocks of a Privacy Impact Assessment (PIA) to help them complete this efficiently.
Subject access requests
If you would like to know what personal information our customers may have processed about you, you can submit a subject access request to the data controller - our customer. Such requests typically take a few weeks to process, and in our experience any personal data held by us will already have been deleted by that point.
Questions?
For specific privacy or security questions, please contact us at privacy@montr.nl.