Juridische documenten die het Platform regelen

What we collect and why

For citizens: When you register via your country's eID system, the Platform receives identity attributes from your eID provider. These are immediately processed through a one-way cryptographic hash (SHA-256 with a seasonal salt). The Platform stores only the resulting fingerprint. Your name, ID number, date of birth, and other personal identifiers are never stored.

Your civic judgments (trust or distrust toward specific officials) are stored in anonymized form, linked only to your cryptographic fingerprint. We store your current judgment per official — not the history of changes.

Your email address (if provided for waitlist or notifications) is stored separately from your judgment data and can be deleted independently.

For officials (monitored subjects): We collect and publish publicly available information about officials exercising governmental authority: name, position, institution, jurisdiction, and authority level. This information is sourced from official government records and public databases.

For subscribers: We collect billing information (processed by Paddle) and account credentials. Billing data is not linked to judgment data.

Legal basis for processing

• Citizen judgment data: Legitimate interest (Article 6(1)(f) GDPR) — providing continuous accountability infrastructure in the public interest.
• Official profile data: Legitimate interest and public interest — officials exercising governmental authority are subjects of legitimate public scrutiny.
• Subscriber billing data: Contract performance (Article 6(1)(b) GDPR).
• Waitlist email addresses: Consent (Article 6(1)(a) GDPR), withdrawable at any time.

Data storage and residency

Citizen data for each country is stored on servers within that country's territory wherever possible. Where national infrastructure does not yet meet the Platform's security, uptime, and compliance requirements, data is stored within the EU in jurisdiction-appropriate infrastructure. In no case does citizen data leave the EU. National deployments are fully isolated.

AGPT Ltd is the data Controller for all national Platforms. Cloud infrastructure providers operate as Sub-processors under data processing agreements.

Data retention

• Citizen fingerprints: Retained while the account is active. Deleted permanently upon account deletion.
• Cryptographic salt: Rotated annually. Old salts permanently deleted after two years.
• Aggregated indices: Retained indefinitely as public statistical data. Cannot be traced to individuals.
• Subscriber billing data: Retained as required by UK tax and accounting law (typically 6 years).
• Waitlist emails: Retained until you unsubscribe or the waitlist period ends.

Your rights under GDPR / AVG

• Inzage (Art. 15) — verzoek om een kopie van gegevens die aan jouw account zijn gekoppeld.
• Rectificatie (Art. 16) — onjuiste gegevens corrigeren.
• Wissing (Art. 17) — jouw account en alle bijbehorende gegevens permanent verwijderen.
• Beperking (Art. 18) — verzoek om beperking van de verwerking.
• Overdraagbaarheid (Art. 20) — jouw gegevens ontvangen in een gestructureerd formaat.
• Bezwaar (Art. 21) — bezwaar maken tegen verwerking op basis van gerechtvaardigd belang.
• Klacht indienen bij de Autoriteit Persoonsgegevens (AP).

Omdat het Platform onomkeerbare hashing gebruikt, worden de meeste persoonsgegevens niet in identificeerbare vorm opgeslagen. Accountverwijdering verwijdert alle koppelbare gegevens permanent.

Om je rechten uit te oefenen: Neem contact op met privacy@teisond.com. We reageren binnen 30 dagen zoals vereist door de AVG.

International transfers

Citizen judgment data is not transferred outside the EU. AGPT Ltd (UK) accesses only aggregated, non-personal statistical outputs. The UK has an EU adequacy decision for data protection purposes.

Sub-processors

We use: cloud infrastructure providers (EU-based data centers), payment processor (Paddle), identity verification provider (Veriff), email service provider (for waitlist and notifications only). A current list is available upon request at privacy@teisond.com.