AdresDirect 365: privacy statement

The short version

The app looks up addresses in the BAG of the Kadaster and fills them in in your own Business Central environment. The request goes straight from your environment to the Kadaster, with your own API key; nothing passes through Van Oosten Software. Van Oosten Software receives only technical telemetry, without post codes, house numbers or addresses.

What data the app processes

In your own Business Central environment:

1. The house number, in a new field on customers, vendors, contacts, ship-to addresses, vendor order addresses, locations and the company information.
2. Address, city, province and post code, in the standard fields of those same cards.
3. Post codes with city, country and province in the standard Post Codes table, when Save Post Codes is on. Without street and without house number.
4. Your API key, encrypted per company in isolated storage.

Who is responsible

Addresses of sole traders and private persons can be personal data, especially with a house number. The app records them in the same fields you would otherwise type them into. You, the Business Central customer, are the controller for that data: you decide whose addresses you record, why and for how long. Van Oosten Software supplies the app but does not process this data on your behalf.

The lookup at the Kadaster

To look up an address, your Business Central environment sends the post code and, when it is filled in, the house number to the BAG API Individuele Bevragingen of the Kadaster, with your own API key. No names or other data from the card go along. By default this happens only while someone types on a card; for an import or integration only when Look Up for Imports and APIs is on. Your own environment makes that request, with your organisation's key and under the terms you agreed with the Kadaster when you requested the key. The Kadaster is therefore not a sub-processor of Van Oosten Software, and Van Oosten Software does not see the request or the answer.

Where the data stays

In your own Business Central environment, at Microsoft, under the terms and the geography you agreed with Microsoft. Van Oosten Software has no access to your environment and receives no copy of your data.

Telemetry

AdresDirect 365 sends technical usage telemetry to the Azure Application Insights of Van Oosten Software, stored in the European Union (West Europe). It records whether a lookup filled in an address, found nothing or failed, with a fixed reason (for example key refused, limit reached or not reachable), and when the setup was completed. It never contains post codes, house numbers, addresses, names or the API key.

Sub-processors

For the telemetry: Microsoft, as the provider of Azure Application Insights. Nobody else. The Kadaster is not a sub-processor of Van Oosten Software: your own environment makes the request to the BAG, with your own key.

How long data is kept

Addresses and house numbers stay in your environment for as long as you keep them. Post codes in the Post Codes table stay until you delete them, also when you uninstall the app. Telemetry is kept for at most 90 days.

Rights of the people involved

Anyone whose address is in your records exercises their rights with you, as the controller. The house number is in an ordinary field on the card, so you can view, change or erase it like any other address field. Questions about the app itself can be sent to info@van-oosten.nl.

Sources

Addresses come from the BAG of the Kadaster (open data, CC0). The province is derived from GeoNames data (geonames.org), under the Creative Commons Attribution 4.0 licence (CC BY 4.0).

Who we are

Van Oosten Software, a trade name of Van Oosten Advies B.V., Wilgestraat 40, 4431 CH 's-Gravenpolder, the Netherlands. Chamber of Commerce 42077708, VAT number NL869603504B01. Email info@van-oosten.nl.