1. Who are we?
BeterMerk is the controller for the processing of account and billing data within the platform. Company name: MerkBrouwers / BeterMerk. E-mail: welcome@betermerk.nl. Website: www.betermerk.nl. Chamber of Commerce: 85502006. VAT: NL865457001B01.
2. What data do we collect?
We only process data that is necessary for the functioning of the scheduling tool: account data such as name, e-mail address, company name, login details and billing details; links to social media via OAuth tokens, account IDs and public profile information from linked channels such as LinkedIn, Instagram and Facebook; content and media such as messages, texts, images, videos and planned publication times; statistics and performance data such as aggregated data on posted messages where available via official APIs; and technical data such as IP address, browser type, device information and log files for security and optimization. We never store passwords for your external social media accounts.
3. Purposes and bases of processing
We process your data on the basis of the following GDPR principles: execution of the agreement for creating your account, authenticating external social media profiles and publishing content according to schedule; legitimate interest in monitoring platform stability, bug fixing and security against unauthorized access or misuse; and legal obligation to retain invoicing and administrative data in accordance with the tax retention obligation.
4. Access to external platforms (APIs)
Our scheduling tool communicates directly with external networks via official APIs. The tool only requests permission for rights that are functionally necessary to prepare messages, publish them and retrieve basic statistics. You can revoke the link at any time via the settings in MarkBase or directly via the privacy and app settings of the relevant social platform.
5. Sharing data with third parties
MarkBase never sells your data to third parties. We only share data with reliable sub-processors that are necessary for our services: cloud and hosting providers within the European Economic Area (EEA), linked social media networks to deliver scheduled content, and payment providers and accounting software for invoicing. Processing agreements have been concluded with all our processors that meet the requirements of the GDPR.
6. Retention periods
Active accounts: data is retained as long as your subscription is active. Scheduled Content: Already published media files and drafts may be deleted after account termination or at your request. API tokens: are immediately deleted or invalidated when you unlink a channel or delete your account. Tax administration: invoice data is kept for 7 years in accordance with legal requirements.
7. Security
We take appropriate technical and organizational measures to protect personal data. Think of secure HTTPS connections (SSL/TLS), encrypted storage of sensitive authentication tokens and strict access restrictions to databases and servers.
8. Your rights
Under the GDPR you have the right to access and rectify your personal data, deletion of data ("right to be forgotten"), restriction of or objection to data processing and data portability (data portability). To exercise these rights, please contact Ian@merkbrouwers.com. You also always have the right to file a complaint with the Dutch Data Protection Authority.
9. Changes
MarkBase reserves the right to adjust this privacy statement in the event of functional updates or legislative changes. The current version can always be found via the dashboard or the website.