Who we are
Yellow55 is a trade name of Bleijenberg Consultancy B.V., registered with the Dutch Chamber of Commerce (KvK) under number 30225648, with its registered address atGulden Hoeve 40, 3451 TG Vleuten. For anything in this statement you can reach us atinfo@yellow55.com.
Two different roles
It is important to keep these apart, because they give you different rights and us different obligations.
For our own contacts, we are the controller. When you email us, fill in the contact form or request a business scan, we decide ourselves what happens to that data. Most of this statement is about that.
In the applications we build, we are the processor. There, our client is in charge of the data and we carry out what that client instructs. Think of a real estate agency whose property listings we automate: the data on their properties, their contacts and their social media belongs to them, not to us. We set this out in a data processing agreement. If your question concerns data that belongs to such a client, please contact that company. We will, of course, help them with it.
What data we receive from you through this website
If you fill in a form, we process what you enter yourself: your name, your email address, the name of your company and the text of your message. We use it to reply and to be able to make you a proposal. The legal basis for this is that you ask us to, and our legitimate interest in being able to provide our service.
The website does not place cookies to track you and does not use third-party advertising or analytics services. So we do not keep track of which pages you view.
What data our applications process
Our applications connect systems that our client already uses. Exactly what passes through them differs per assignment, but it always falls into these categories:
- Access keys. When a client connects their account on a platform to our application, we store the key that allows us to act on their behalf. That key cannot be viewed on screen and expires automatically; we never store passwords.
- Business content. Texts, photos, videos and data about, for example, a property, an order or an appointment, to the extent the assignment requires it.
- Contact details of third parties. In some assignments we come across data of our client's customers or contacts, for example a name and email address in a system we connect to. We use it only to carry out the assignment and never for anything else.
- Logs. So that we can resolve faults, we record what an integration did and when. They contain as little as possible.
We do not sell data, we do not trade in it, and we do not use what we process for a client to train our own models.
How long we keep it
We keep messages sent through the website for as long as the contact continues and for up to two years after that, so that we can pick up a conversation where it left off. We keep records that we are legally required to retain for seven years. We keep data in an application for as long as the agreement with that client runs, and we delete it within thirty days after it ends, unless we are legally required to keep something for longer.
Who we share data with
We engage suppliers that host, store or process data for us. We conclude a data processing agreement with each of them. At present these are the following categories, with the parties we use for them:
- Hosting and execution: Vercel.
- Database and file storage: Supabase.
- Language models for writing texts: Anthropic.
- Platforms we connect to at the client's request:including Meta (Instagram and Facebook), Microsoft (OneDrive, SharePoint and Outlook), Google and the industry systems the client uses itself.
A current and complete list for a specific assignment is available on request. We share nothing else with third parties, except where the law requires us to.
Processing outside Europe
Some of our suppliers are based in the United States. Where that is the case, the transfer is based on the European Commission's standard contractual clauses or on a valid adequacy decision. Where we have a choice, we choose a European region for storage.
How we keep it secure
Traffic is encrypted. Access keys are kept in a shielded environment and are not visible in the application. Access to systems is limited to those who need it. If something does happen that involves your data, we report it to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) and, where the law requires it, to you as well.
Your rights
You may ask us what data we hold about you, and have it corrected, erased or transferred. You may object to processing and withdraw consent you gave earlier. Send your request toinfo@yellow55.com; we will respond within one month. To avoid giving data to the wrong person, we may ask you to verify your identity.
Disconnecting an integration or having data erased
If you have connected an account of your own or of your company to one of our applications, for example an Instagram account or a folder on OneDrive, you can disconnect that integration yourself in the settings screen of that application. We will then delete the stored access key immediately.
If you would also like us to erase everything we have recorded about that integration, email info@yellow55.com, stating the application and the account. We will erase it within thirty days and confirm this by email. If it concerns data we process for one of our clients, we carry out such a request in consultation with that client, because they decide on it.
In addition, you can always revoke the access you have given an application on the platform itself, in the security settings of your account with Meta, Microsoft or Google.
Lodging a complaint
If we cannot resolve it together, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) viaautoriteitpersoonsgegevens.nl.
Changes
Our services change, and this statement changes with them. The date at the top shows when we last updated it. In the event of a significant change, we will inform the clients it affects.