Privacy statement FastID

Introduction

FastID B.V. (Prinsessegracht 6, 2514 AN, the Hague, the Netherlands) (here in after referred
to as FastID, we or us) is a Dutch company that has developed and operates a digital
identity service for buyers and consumers called the FastID-App, to provide fast and secure
access to services.

This privacy statement describes how FastID will collect, use, and share your personal data
as controller when you visit or provide information through our website (www.fastid.com),
and/or subscribe to our newsletter (“Privacy Statement”).

More information about the processing activities carried out by FastID in its capacity as a controller when you use our FastID-App can be found here.

It also describes your data protection rights, including the right to object to some of the
processing which FastID carries out. More information about your rights, and how to
exercise them, is set out in Section 6 of this statement.

This privacy statement only applies to the use of our website (www.fastid.com). A separate
privacy statement applies to the use of the FastID-App.

Personal data we collect about you

Personal data collected directly from you
We collect and process personal data about you when you request to receive services from us, correspond with us via our website, or when you provide other information directly to us by any other (electronic) means.

Contact information: email address, job function and phone number of website visitors,
customers, vendors and suppliers

Marketing information: marketing preferences, including any consents given to us by
website visitors and customers

Device information: information related to the browser or device to access our
website by website visitors, customers, vendors and suppliers

How do we use this information and what is the legal basis for this use?

We will only use this information for the purposes and legal bases and share your personal data with the third parties (data recipients) as set out below:

Purpose / Categories of Personal data / Legal Basis /Data Recipients

To respond to inquiries via website / Contact Information /We have a legitimate interest in responding to inquiries / FastID.

To provide you with the services requested / Contact Information / We have a legitimate interest in processing personal data to provide services to our customers / FastID.

To manage our relationship with our customers or suppliers/vendors - Contact Information - We have a legitimate interest in managing our business and providing services to our customers and suppliers/vendors / FastID.

To process payments, billing and collection / Contact Information / We have a legitimate interest in processing your personal data to process payments, billing and collection / FastID.

To send you direct marketing by email in relation to services provided by us / Contact Information / Your consent. We have a legitimate interest in sending direct marketing by emails to our existing customers about similar services we provided to our customers / FastID.

To manage and operate our website, including to keep it updated and relevant, to develop our business and to inform our marketing strategy / Device Information / We have a legitimate interest in managing and operating our website, including through strictly necessary and analytics cookies / Webflow, Inc. (USA).

To prevent, investigate and/or report security threats, fraud, terrorism, misrepresentation, or crime / Contact Information. Device Information / We have a legal obligation under applicable Dutch laws. We have a legitimate interest in preventing and detecting, security threats, fraud or other criminal or malicious activities / FastID.

To sell or buy any business or assets / Contact Information. Device Information / We have a legitimate interest in sharing personal data with prospective sellers/buyers and legal advisors if we sell or buy any business or assets / Sellers/buyers. Legal advisors.

To establish, exercise or defend legal claims or to comply with orders or requests of relevant courts or regulators / Contact Information. Device Information / We have a legitimate interest in processing personal data to establish, exercise or defend a legal or equitable claim. We might also have a legal obligation under applicable Dutch laws / Courts, law enforcement authorities, regulators, government officials and legal advisors (depending on the specific case).


There are instances where we have a legitimate interest to process your personal data. Our legitimate interest will vary depending on what we are processing your data for, and we explain above what the interest is and how it relates to the processing operations that we are carrying out. Where we process personal data on the basis of a legitimate interest, we will carry out a balancing test to document our interests, to consider what the impact of the processing will be on you and to determine whether your interests or fundamental rights and freedoms outweigh our interests in the processing taking place. You can obtain information about this balancing test by contacting us via the contact details set out in Section 9 of this statement.

Where we transfer your personal data

Your personal data is not disclosed to other third parties located outside of the European
Union (EU) and/or the European Economic Area (EEA).

Your choices and rights

You have the following rights:

Access: Enables you to receive a copy of your personal data.

Rectification: Enables you to correct any inaccurate or incomplete personal data we hold about you.

Erasure: Enables you to ask us to delete your personal data in certain circumstances.

Restriction of processing: Enables you to ask us to halt the processing of your personal data incertain circumstances.

Object to processing: Enables you to object to us processing your personal data on the basisof our legitimate interests (or those of a third party), including processing for direct marketing purposes or profiling for purposes ofdirect marketing, your objection will be upheld, and we will cease processing your personal data, unless the processing is based oncompelling legitimate grounds or is needed for the exercise or defence of legal claims that may be brought by or against us.

Data portability: Enables you to request us to transmit personal data that you have provided to us, to a third party without hindrance, or to give you acopy of it so that you can transmit it to a third party, where technically feasible.

--

Limitation of these rights. Please note that the above rights may be limited, for exampleif fulfilling your request would reveal personal data about another person, or if you ask us todelete information which we are required by law or have compelling legitimate interests tokeep. If you wish to exercise any of these rights, please contact us at the contact details setout in Section 9 of this statement.

Withdrawing consent. Wherever we rely on your consent, you have the right to withdrawthat consent at any time, without affecting the lawfulness of processing based on consentbefore its withdrawal. We may however have other legal grounds for processing your data forother purposes, such as those set out above. When you are an existing customer, we are ableto send you direct marketing without your consent, where we rely on our legitimate interests. You have an absolute right to opt-out of direct marketing, or profiling we carry out for direct marketing, at any time. You can do this by following the instructions in the communicationwhere this is an electronic message, or by contacting us using the contact details set out in Section 9 .

Making requests. To make access, deletion or other requests to invoke your rights, pleasecontact us by using the contact details set out in Section 9 . Before completing your request,we may need to verify your identity, or if someone else makes a request for you, verify thatyou have given them permission to make that request.

Right to lodge a complaint. If you have unresolved concerns, you have the right tocomplain to the data protection authority in the country that you reside in or the country ofyour place of work or the country where the alleged infringement took place. Please find anoverview of the data protection authorities within the EU here.

Possible consequences when invoking your rights. Where we collect personal data tocomply with our legal obligations, this is mandatory, and we will not be able to manage therelationship with you without this information. In all other cases, provision of the requestedpersonal data is optional, but this may affect your ability to receive requested services, wherethe information is needed for those purposes.

How long we retain your personal data

We store information related to our website visitors, customers, suppliers and vendors up to
two (2) years after our last communication or the termination of our business relationship,
unless we are legally required to keep the data longer. To comply with obligations under
Dutch tax law we are required to retain relevant data for seven (7) years for Dutch tax
purposes.

Information that we hold that is relevant for the establishment, exercise or defence of legal
claims by or against us or our website visitors, customers, suppliers and vendors will be
retained for five (5) years after the end of the original retention term. After this five-year
period, we will evaluate whether this information is still necessary. We have implemented
safeguards to ensure that the data is only accessible to a limited number of authorised
persons on a need-to-know basis. Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period of 30 days after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not tosend you direct marketing or to process your data that we can respect your request in the future. If you would like to receive furth et out in Section 9 of this statement.

Cookies

Cookies are small text files that are placed on your computer when you visit a website. They ensure that the site functions optimally and collect data to make the information shown as relevant as possible for you. When you visit our website, only strictly necessary and analyticscookies are placed. Strictly necessary cookies are necessary for the functioning of the website. Analytics cookies help with monitoring the quality and efficiency of the website. We do not place any other cookies, such as advertising cookies or any third party cookies.

Updates to this privacy statement

We reserve the right to update this privacy statement at any time and, in addition to postingthe new privacy statement to our website, we will inform you when we make any substantialupdates to our privacy statement. We may also notify you in other ways from time to timeabout the processing of your personal data.

Version: may 2025


Contact



The data controller for your personal data is FastID B.V. If you have any questions about this privacy statement or wish to contact us for any reason in relation to our personal dataprocessing, please contact us at privacy@fastid.com

FastID B.V.
Prinsessegracht 6
2514 AN Den Haag
Nederland
E: info@fastid.com
Kamer van Koophandel: 72599820