Privacy Policy

Who are we?

We are Zerocopter. When we process your data, our legal role is that of data controller.

For any questions about this privacy & cookie statement, you can contact us at privacy@zerocopter.com.

Our full details are:

Zerocopter

Werfkade 2

1033 RA Amsterdam

The Netherlands

This privacy statement is applicable to:

• visitors of the Website;
• potential customers and other persons with whom Zerocopter is in contact, or tries to be, by email or by telephone;
• newsletter subscribers;
• recipients of invitations for events (in the following: Marketing) of Zerocopter;
• customers of Zerocopter; and
• all other persons who contact Zerocopter and of whom Zerocopter processes personal data.

For the privacy policy of the Zerocopter Application (app.zerocopter.com), please go to: https://app.zerocopter.com/privacy

What data we collect

Contact data: data that can be used to contact you.

For example: name, phone number, (email) address, company info.

Financial data: data that enables the payment of our services.

For example: bank account number and holder.

Research data: data collected during the performance of our services.

For example: anonymised analysis on reported vulnerabilities, data profiling  

Click and behavior data: data on how you use our services and website.

For example: IP-address, pages visited, visit duration, clicks, cookies, and other analytical data.

User-generated data: data you create while using our services, website or customer service.

For example: filled in contact forms, emails, answers to surveys, feedback.

Data we aim not to collect

Children’s data: data of children under the age of 16.

We do not aim our services at children under 16. We do not deliberately collect personal data on minors. In case we become aware that we have collected personal data on a child younger than 13 without the parents’ consent, we take actions to remove the data from our servers.

How and why we collect your data

How do we keep your data secure?‍

The security of your personal data is our top priority. Our security experts are constantly assessing and improving the way we collect, process, and store your personal data. We take, for instance, the following measures (based on ISO/IEC 27002 (2013) and the security guideline NCSC (2015)):

• Data security policy: in which specific attention is also dedicated to data classification, the granting of access, and the control of vulnerabilities;
  
• Screening of staff: screening prior to employment, but also every five years a certificate of good behaviour is required from all collaborators. We also maintain a Code of Conduct for Zerocopter staff.
  
• Access authorisations: files, such as personnel documents and email traffic in the online environment of Zerocopter, are secured by access authorisations. The Chief Executive Officer gives authorisations to collaborators
  

• Enforcement of policies/procedures: besides the data security policy, we maintain several other security policies and procedures. For example a policy for network protection, clean desk and clear screen, physical security and security incidents and procedures for data breaches.
  

Your privacy rights

Do you want to exercise any of these rights? Contact us at: privacy@zerocopter.com

Right to access: you have the right to inspect the personal data that we process about you.

Right to rectification: you have the right to make us correct any incorrect or incomplete personal data we have about you.

Right to erasure: you have the right to make us delete any personal data we have about you.

Right to restriction of processing: in some cases, you have the right to ask us to restrict (temporarily or otherwise) the processing of your personal data. This means that we’ll process less data about you.

Right to object: you have the right to object to the processing of your personal data.‍

Right to withdraw consent: you can easily withdraw your consent to the processing of your personal data at any time.

Right to data portability: you have the right to obtain a copy of your data so that you can port it to another service. If you ask us and it is technically possible, we will directly transfer the data to the other service for you.‍

Right to lodge a complaint about us with the supervising authority: if you are unhappy with how we process your data, please tell us first, so we have a chance to address your concerns. If we fail in this, under the privacy legislation, you have the right to contact the supervising authority to lodge a complaint.

Third parties who also process your data

To achieve the purposes we described above, we share your personal data with other companies or institutions. We have signed a data processing agreement with these parties to ensure that they process your data according to the purposes, safeguards, and good practices detailed in this statement.

Where personal data is transferred to a third party outside of the EEA we take steps to ensure we agree the required standard contractual clauses and where needed additional measures with them.