Privacy Notice

This privacy notice explains how personal data is processed when you use the Actware Logistic App for Recticel Group.

1. Who is responsible for your data?

The Recticel Group entity that employs you or grants you access to the application acts as the data controller. BFP Actware BV acts as a data processor and processes personal data only on behalf of Recticel Group.

2. What personal data is processed?

The application processes limited personal data for user identification, account management and secure access.

• name
• email address
• account and authentication information
• technical security information required to secure access to the application

The Logistic App also processes operational information such as scanned barcode or QR codes, HU numbers and answers to operational questions. This information may be associated with a user account where necessary for traceability.

3. Purposes of processing

Personal data is processed to provide access to the application, manage user accounts, maintain security, deliver support and technically administer the Logistic App.

4. Legal basis

Recticel Group, as data controller, determines the applicable legal basis for the processing. BFP Actware processes the data only in accordance with Recticel Group’s documented instructions and the applicable Data Processing Agreement.

5. Service providers and sub-processors

Personal data is not sold or disclosed to third parties for their own purposes. Authorised service providers may be used to provide and secure the service.

• Combell – hosting and backup services for the Actware Logistic App.

6. Data location and international transfers

The hosting and backup services for this application are intended to process data within Europe/the EEA. If a transfer outside the EEA becomes necessary, it will be assessed in advance and handled in accordance with applicable GDPR requirements and the arrangements with Recticel Group.

7. Security

BFP Actware applies appropriate technical and organisational measures. These include HTTPS/TLS for data in transit, MFA for the cloud application, secure password hashing using bcrypt, access controls, separate live and development environments, and encrypted backups.

8. Retention

Under the current service arrangements, operational data is retained actively for up to 5 years and may then be archived for up to an additional 5 years. Data can be deleted at the request of Recticel Group, subject to applicable legal or contractual retention obligations.

9. Your privacy rights

For requests concerning access, rectification, deletion, restriction or other GDPR rights, please contact Recticel Group first as the data controller. BFP Actware assists Recticel Group in handling such requests.

10. Contact

Technical or privacy-related questions concerning processing by Actware can be addressed to:

11. Changes

This privacy notice may be updated when functionality, data processing activities or legal requirements change. The latest version is available on this page.