Back to the Data Processing Agreement

This Specification of Data Processing forms part of the Data Processing Agreement between the Customer and the Provider, as referenced in Clause 1.5(a).

Subject matter

The compilation of Dutch statutory annual reports and their preparation for filing, and the documentation of that work.

Duration

For the term of the Agreement, and thereafter only as Clause 11 of the DPA provides.

Nature and purpose

Intake and parsing of financial administrations and XAF audit files; roll-forward of the prior-year filing; AI-assisted mapping to the Referentie Grootboekschema and the applicable reporting taxonomies; validation and checks; generation of the financial statements, publication documents, and filing documents; and the recording of the mapping documentation, the approvals, and the changes between financial years.

Types of personal data

Account data of the Customer's personnel (name, email address, authentication credentials, and passkey identifiers); personal data contained in the administrations and source documents the Customer submits, which typically includes the names and roles of directors, signatories, and accountants, and may include personnel, payroll, and counterparty data to the extent it is present in the general ledger or the audit file; approval records naming the person who approved a step and the moment they did so; and usage and audit logs.

Categories of data subjects

The Customer's personnel (administrators and users of the Customer's account), and the individuals whose personal data appears in the administrations and reports the Customer processes through the Services, among them the directors, signatories, accountants, and, where present in the administration, the employees and counterparties of the Customer's own clients.

Special categories of personal data

None are requested and none are required. The Services are not designed for special categories of personal data within the meaning of Article 9 GDPR. The Customer is responsible for limiting the Personal Data it submits to what the purpose requires, as Clause 3.3 of the DPA provides.