Huisly Business Terms

These terms apply to businesses that use the Huisly Data API, Huisly for business or a claimed agency page. Part A covers the Service, Part B agency pages and Part C the processing of personal data on a Customer's behalf. Huisly's Terms of Service cover personal use of Huisly.

1. Who we are and what these terms cover

1.1 These terms are offered by Huisly (legal form: Sole proprietorship), registered with the Dutch Chamber of Commerce (KVK) under number 96874619, VAT number NL005232149B61, Don Boscostraat 429, 1068 TH Amsterdam, Netherlands ("Huisly", "we").

1.2 These terms apply to the Huisly Data APIs, the Huisly for business area at www.huisly.nl/business, and their documentation (together, the "Service"), and to every agreement to use the Service. They also cover agency pages on Huisly that an estate agency has claimed, with the extra rules in Part B. The Huisly Data API was previously called Voseno.

1.3 The Service is for businesses only. The "Customer" is the company, organisation or self-employed professional that uses it for its trade, business or profession. Consumers can't use the Service; Huisly's Terms of Service apply to personal use of the Huisly website, apps and AI-assistant connector. Whoever accepts these terms for the Customer confirms that they're authorised to bind it.

1.4 The Customer accepts these terms when creating an organisation, when buying a plan or when claiming an agency page. We make them available before that moment, in a form the Customer can store and print. The Customer's own general terms and conditions don't apply and are expressly rejected.

1.5 If a separate written agreement (for example an Enterprise agreement) differs from these terms, that agreement prevails on that point.

2. The Service

2.1 The Huisly Data API provides Dutch housing and property data through APIs. The products and their status are listed at www.huisly.nl/data. Only products marked as live are part of the Service; products marked "coming soon" or "planned" are not, and there's no right to them.

2.2 We may change, limit or stop any part of the Service, such as a product, an API, an endpoint, a field, a data source, a plan or a feature, for a valid reason, such as a change at a data source, a law, security, costs or the further development of the Service. Where reasonable, we announce a change that affects existing use in the documentation, in Huisly for business or by email, but we don't promise a fixed notice period. If the Customer doesn't accept a change, it can cancel at any time (section 6.4). Stopping the whole Service is covered by section 15.2.

2.3 Huisly for business also has an agent dashboard. In it, the Customer's members can keep track of the Customer's clients and their saved listing searches, and see listings on Huisly that fit those searches. Its plans are described in section 6.1, and the personal data the Customer records in it is covered by Part C. Claiming an agency page is covered by Part B.

3. Accounts, organisations and members

3.1 The Customer's business account, organisation and members are set up in Huisly for business. The Customer makes sure the information it gives is correct.

3.2 Each member has a role: owner, admin or member. An owner or an admin can remove members; an owner can't be removed. Removing a member doesn't revoke the API keys that member created; the Customer revokes them (section 4). The Customer is responsible for what its members do with the Service, and for removing members who should no longer have access.

4. API keys

4.1 API keys are confidential. The Customer keeps them secure, doesn't put them in public code, browsers or apps, and revokes a key as soon as it may be exposed.

4.2 The Customer is responsible for all use made with its keys and accounts until the keys are revoked, also when someone else uses them. A suspected leak or security problem can be reported to security@huisly.nl.

4.3 We may block or revoke a key that we reasonably believe is exposed or misused.

5. Trial credits

5.1 A member can claim a one-time amount of free trial credits for an organisation, if the member has never claimed trial credits and none of the organisations the member belongs to has ever had credits; the amount is shown in Huisly for business when claimed. Each user can claim trial credits only once, and each organisation can receive them only once. Trial credits are for trying the Service and have no money value.

5.2 We may change or end the trial offer at any time.

6. Plans, credits and payment

6.1 Plans. The Huisly Data API's plans, their monthly price and their monthly credits are shown at www.huisly.nl/data/pricing and in Huisly for business. Each successful request uses the number of credits stated there; a failed request costs no credits. The agent dashboard has its own plans, shown under Agencies in Billing in Huisly for business: Free; Makelaar, billed monthly or yearly at the price shown there; and Enterprise, by arrangement, with limits agreed separately (section 1.5). They set the dashboard's limits, such as how many active clients the Customer can have, and add no credits. Prices exclude VAT.

6.2 Paddle. Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries and handles returns. The purchase is also governed by Paddle's Buyer Terms, and Paddle issues the invoices.

6.3 Credits. The credits of a Huisly Data API plan are added at the start of each paid month and expire when that month ends. Unused credits aren't carried over, refunded or exchanged for money.

6.4 Renewal and cancelling. A plan renews at the end of each paid period, a month or, for a yearly plan, a year, until it's cancelled. The Customer can cancel at any time through Manage billing in Huisly for business, which opens Paddle's customer portal. Cancelling takes effect at the end of the current paid period; until then the plan's credits and limits still apply. When a Makelaar plan ends, nothing in the agent dashboard is deleted: the Free plan's limits apply again, clients and saved searches above them are kept, and the Customer can't add more until it's under those limits. To switch to another plan, the Customer cancels the current plan through Manage billing and chooses the new plan once the current plan has ended, or asks support at support@huisly.nl. An Enterprise plan is arranged through sales@huisly.nl.

6.5 Refunds. Payments aren't refunded, unless Paddle's Refund Policy or mandatory law provides otherwise. This also applies when we suspend or end access under section 15.3. Credits already used are never refunded.

6.6 Failed payment. Paddle handles a failed payment under its own terms and may try again. As long as a payment is due and not made, we may suspend the Service, or end the agreement under section 15.3. For a Makelaar plan, the plan's limits stay for 14 days after Paddle reports a failed payment to us; after that the Free plan's limits apply until Paddle reports that the payment has been made.

6.7 Price changes. We may change prices or credits per request for a valid reason, such as higher costs of data sources or infrastructure, or a change to the Service. We announce the change with reasonable notice, by email to the organisation's owners and on the pricing page or in Billing. A change applies from the first paid period starting after the notice period. If the Customer doesn't agree, it can cancel free of charge before the change applies.

7. Fair use and acceptable use

7.1 We may set and change limits on use at our discretion, such as how many requests each caller can make per minute and fair use of requests that cost no credits, such as place search. We don't promise any particular limit. A request over a limit can be refused, for example with status 429.

7.2 The Customer uses the Service lawfully and doesn't:

• resell, sublicense or redistribute the data as a dataset, or offer it through a data, API or listing service that competes with Huisly;
• share its API keys with others, or let others use the Service through its account other than through the Customer's own products;
• work around limits or credit costs, for example with several keys, organisations or trial claims;
• copy the Service in bulk, reconstruct its sources, or scrape the sources' websites through the Service;
• use the data to contact, profile or take decisions about identifiable people in breach of data-protection law, or to send unsolicited messages;
• use the data to discriminate, for example in selecting tenants or buyers;
• interfere with the Service, test it for vulnerabilities without our written permission, or harm Huisly's systems or data sources.

7.3 If we reasonably suspect a breach of this section, we may limit, suspend or end the Customer's access at once (section 15.3).

8. Using the data

8.1 Licence. For as long as the agreement runs, Huisly grants the Customer a non-exclusive, non-transferable right to use the data it obtains through the Service within its own business, to show, analyse and integrate it in the Customer's own products and services, and to build derived results from which the original data can't practically be extracted. Anything else requires our written permission.

8.2 AI and machine learning. The Customer may use the data to train or improve models that it uses only within its own products and services. It may not use the data to build, train or offer a dataset or model that reproduces or replaces the Service or Huisly's data, and it doesn't use listing photos or listing descriptions for training.

8.3 Rights of others. Listings come from third-party sources. Their photos and descriptions can be protected by copyright, and collections of data can be protected by database rights. Huisly only grants the rights Huisly has. Wherever the Customer shows a listing, it shows the source where the Service gives one, keeps any link to the original listing that the Service provides, and doesn't present the listing as its own.

8.4 Public registers. Data from public registers (such as BAG, CBS and EP-Online) is subject to those registers' own conditions, which take precedence over this section.

8.5 Takedown. If a source, a rights holder, a person concerned or an authority asks for data to be removed, or if we have to remove it for another legal reason, we may remove it from the Service. If we tell the Customer that specific data has been removed for such a reason, the Customer stops using it and deletes its copies within 10 working days, and confirms this on request.

8.6 Personal data. Some data, such as the name or phone number of an agent in a listing, can be personal data. For that data the Customer is an independent controller under the GDPR and complies with it, including informing the people concerned where required. The Customer doesn't use it for any other purpose than the housing information it came with.

8.7 The Customer's responsibility. The Customer decides how it uses the Service and the data, and is responsible for that use, for its own products and services, for what it tells its own customers, and for its own compliance with the law.

9. Data quality and no warranty

9.1 Data comes from third-party sources and public registers. It can be incomplete, outdated, late or wrong, and a source can change or stop at any time. We don't guarantee that the data is accurate, complete or up to date, that a particular source or area is covered, or that data is delivered within a certain time.

9.2 The Service and the data are provided "as is" and "as available". As far as the law allows, Huisly gives no promises or warranties about them other than those expressly stated in these terms, including about their fitness for a particular purpose.

9.3 Huisly doesn't give legal, financial, valuation or housing advice. The Customer checks data before using it for decisions with legal or financial effect.

9.4 If the Customer finds an error, it can report it to support@huisly.nl. We may correct it, but don't promise to.

10. Availability and support

10.1 We don't promise that the Service is available at all times, uninterrupted, fast or free of errors, and we offer no service level, response time or support level, unless a written Enterprise agreement states one.

10.2 We may carry out maintenance at any time, which can interrupt the Service. Questions can be sent to support@huisly.nl.

11. The Customer's own data

11.1 How Huisly processes personal data of the Customer's members (accounts, keys, request logs, usage and billing) is described in the Huisly Privacy Policy. Huisly is the controller for that data. For the personal data the Customer records in the agent dashboard (section 2.3), such as its clients' details, Huisly is the Customer's processor and Part C applies.

11.2 Huisly uses the Customer's request logs and usage to provide, secure, bill and improve the Service and for the other purposes in the Privacy Policy. Huisly may use statistics derived from them that identify neither the Customer nor a person for any purpose.

11.3 While the agreement runs, the Customer's members can see the organisation's request log and usage in Huisly for business. Until 30 days after the agreement ends, the Customer can ask support@huisly.nl for a copy, as far as we still keep them under the Privacy Policy. We provide it within a reasonable time, in a format we choose.

12. Confidentiality

Both parties keep confidential the other's non-public information they receive through the Service, such as API keys, non-public prices and security information, and use it only for the agreement. This doesn't apply to information that's already public or that a law, court or authority requires to be disclosed. Huisly may share such information with its advisers and providers, and with a party taking over the agreement under section 18.1, if they are bound to confidentiality.

13. Intellectual property

Huisly keeps all rights to the Service, the APIs, the documentation, and its selection and arrangement of the data. The Customer keeps all rights to its own products and to what it builds with the Service, within section 8. Huisly may use suggestions and feedback about the Service freely.

14. Liability

14.1 Huisly's total liability for all damage arising from the agreement, the Service or the data together is limited to the amount the Customer paid for the Service in the 3 months before the event that caused the damage. If the Customer paid nothing in that period, for example because it used only trial credits or free plans, or claimed an agency page without paying, it's limited to €100. Connected events count as one event.

14.2 Huisly isn't liable for:

• indirect or consequential damage;
• lost profit, revenue, savings, business or opportunities;
• loss or corruption of data;
• loss of goodwill or reputational damage;
• damage from business interruption;
• damage resulting from data that is wrong, incomplete or late (section 9), or from a change or failure at a data source;
• damage resulting from use of the Customer's keys or accounts.

14.3 These limits and exclusions don't apply to damage caused by intent or gross negligence of Huisly or its management, nor where the law doesn't allow liability to be limited. Nothing in these terms excludes the Customer's statutory remedies if Huisly fails to perform an obligation it expressly takes on in these terms; sections 14.1, 14.2 and 14.4 limit the damages.

14.4 Huisly is only liable for a failure to perform if the Customer has first given Huisly written notice of default, describing the failure as fully as possible, and a reasonable period to put it right, unless putting it right is impossible. A claim for damages lapses if the Customer hasn't reported it to Huisly in writing within 12 months after the Customer became aware of the damage, or could reasonably have become aware of it.

14.5 The Customer compensates Huisly for claims of third parties, including sources, rights holders, people concerned and supervisory authorities, and for the reasonable costs of defence that result from them, as far as they result from the Customer's breach of these terms or the law, or from the Customer's own products and services. This doesn't apply as far as the claim results from Huisly's own breach.

14.6 The people and companies Huisly uses to provide the Service can also rely on sections 14.1 to 14.4, except for damage caused by their own intent or gross negligence.

15. Suspension and ending the agreement

15.1 The Customer can end the agreement at any time by asking support@huisly.nl to close the organisation. Cancelling a plan (section 6.4) ends only that plan, not the agreement.

15.2 Huisly can end the agreement, or stop the Service or a plan altogether, for any reason, with reasonable notice by email to the organisation's owners. The end doesn't take effect before the end of the Customer's current paid period, so the credits and limits already paid for can be used until then.

15.3 Huisly can suspend or limit access at once, or end the agreement with immediate effect, if the Customer doesn't pay, breaches these terms, or uses the Service in a way that can harm Huisly, its sources or others; if this is needed for security or to prevent abuse; if a law, court, authority or data source requires it, or the Customer's use exposes Huisly to a serious legal risk; or if the Customer is declared bankrupt, applies for a suspension of payments or stops its business. Where reasonable, we tell the Customer the reason. Huisly isn't liable for damage resulting from a measure under this section.

15.4 When the agreement ends, the licence in section 8 ends. Within 30 days the Customer deletes the data it stored from the Service, except derived results allowed by section 8.1 and copies it must keep by law. Provisions that by their nature continue after the end, such as sections 8.3, 8.5, 12, 14, 15.4 and 19, stay in force.

16. Force majeure and third parties

16.1 Neither party is liable for a failure caused by circumstances beyond its reasonable control, such as a failure, change or end of a data source or public register, an outage or failure at a hosting, network, email or payment provider, an attack, a power or internet failure, or a measure of a government. This doesn't excuse payments already due. If such a situation lasts longer than 60 days, either party can end the agreement without having to pay compensation.

16.2 The Service relies on third parties, such as hosting, network and payment providers and data sources. Huisly isn't responsible for their services or terms.

17. Changes to these terms

17.1 We may change these terms for a valid reason, such as a change to the Service, our data sources, our providers or a law. We publish the new version on this page with the date it applies from. We announce a change to the Customer's disadvantage with reasonable notice by email to the organisation's owners.

17.2 If the Customer doesn't agree, it can cancel free of charge before the change applies. Continuing to use the Service after that date means accepting the change. Changes required by law, security or a data source, or that don't put the Customer at a disadvantage, can apply sooner.

17.3 For an Agency with a claimed page (Part B), we send proposed changes by email at least 15 days before they apply, or longer if the Agency needs more time to make technical or commercial adjustments, and the Agency can end its claim before then. This notice period doesn't apply where a law requires a faster change, or where a change is needed to address an unforeseen and imminent danger of fraud, malware, spam, data breaches or other security risks.

18. Other provisions

18.1 Huisly may transfer the agreement to a company that takes over the Service, such as a private limited company (B.V.) set up for it. The Customer agrees to this in advance. We'll tell the Customer about such a transfer. The Customer can't transfer the agreement without our written consent.

18.2 Notices under these terms are sent by email: to the Customer at the email address of its owners, and to Huisly at legal@huisly.nl.

18.3 If a provision is invalid, the rest stays in force, and the invalid provision is replaced by a valid one that comes as close as possible to its purpose.

18.4 These terms are available in English and Dutch. If they differ, the Dutch version prevails.

18.5 These terms, with the pages they refer to and any written Enterprise agreement, are the whole agreement between the parties about the Service. If Huisly doesn't enforce a right, it doesn't give that right up.

18.6 Huisly's records, such as the request log and the credit ledger, count as proof of the Customer's use and credits, unless the Customer proves otherwise.

19. Governing law and disputes

19.1 Dutch law applies. The UN Convention on Contracts for the International Sale of Goods (CISG) doesn't apply.

19.2 The parties first try to resolve a dispute together. If that doesn't work, the competent court in Amsterdam decides it.

20. Contact

Huisly, Don Boscostraat 429, 1068 TH Amsterdam, Netherlands. Support: support@huisly.nl. Security: security@huisly.nl. Legal: legal@huisly.nl.

B1. Agency pages and claiming

Part B covers agency pages on Huisly and claiming them through Huisly for business.

B1.1 Where Huisly shows pages about estate agencies, they are built from public information and from the listings Huisly indexes. An estate agency (the "Agency") can claim its page. From that moment these terms apply to the Agency: this Part B, and sections 1, 3, 4, 12 and 14 to 20 of Part A. If the Agency also uses the rest of the Service, such as the agent dashboard or a plan, all of Part A and Part C apply to that use as well. For an Agency, Part B and section 17.3 prevail over sections 15.2, 15.3, 17.1 and 17.2. Changes to these terms don't apply to an Agency with retroactive effect, unless a law requires it or the change benefits the Agency.

B1.2 To claim a page, a member of the Agency's organisation shows that the organisation acts for that agency. A claim can be approved automatically, but only when the member's verified sign-in email address is on the agency's own website domain and the member signed in recently; the member may be asked to sign in again first. Other claims are reviewed by hand by Huisly staff. We may refuse a claim. We may undo a claim later if the proof isn't enough or turns out to be wrong; B6 then applies.

B2. What the Agency adds

B2.1 A claimed page lets the Agency add or change the profile details shown in Huisly for business, such as its description, phone number, general email address and website. Listings themselves come from their sources and can't be edited on the page; corrections go to the source or to support@huisly.nl.

B2.2 The Agency makes sure that what it adds is correct, lawful and its own to use, and doesn't infringe anyone's rights. It keeps its details up to date.

B2.3 The Agency keeps all rights to what it adds. It gives Huisly a free, non-exclusive licence to publish it on Huisly's website, apps and AI-assistant connector, and to adapt it to fit them, for as long as the page is claimed. When the claim ends, the page stops showing it; copies in caches can remain for a while. What Huisly keeps after that is described in B5.

B3. Fees

Claiming and managing an agency page is free. We may introduce fees for it; that is a change of these terms under section 17.3. The agent dashboard has a free plan and paid plans (section 6.1), sold through Paddle under section 6; a plan doesn't affect the agency page, a claim or the order in B4.

B4. Ranking

B4.1 In the agency directory, claimed agencies are shown before unclaimed ones, and both groups are sorted by name. A user can search by name or show only agencies with listings in a place; that narrows the list but doesn't change the order. Claiming comes first because a claimed page has been confirmed by the agency itself and usually has more complete details.

B4.2 Listings in Huisly search are ordered by the filters and sort order the user chooses, such as newest or price. Whether an agency has claimed its page doesn't affect search results.

B4.3 No one can pay for a better position. If that ever changes, we change this section first under section 17.

B5. Data about the Agency's page

Huisly keeps what the Agency adds, which member of the Agency's organisation last saved it and when, and a record of the claim and the decisions on it. The Agency sees what it added in Huisly for business. We don't share the Agency's details with other agencies, except what the page itself shows publicly. When a claim ends, the Agency no longer has access to them in Huisly for business. Huisly keeps what the Agency added, so that it returns if the claim is approved again, until another organisation's claim on the page is approved or the Agency's organisation is closed; Huisly may keep the record of the claim. Personal data is handled under the Huisly Privacy Policy.

B6. Hiding, restricting and removing

B6.1 We may hide or change content the Agency added, or restrict or suspend its claimed page, if it breaches these terms or the law, if the claim turns out to be wrong, if this is needed to prevent fraud or for security, or if a court or authority requires it. We give the Agency a statement of reasons by email, at the latest when the measure takes effect.

B6.2 We may end a claim entirely with at least 30 days' notice and a statement of reasons by email. We may end it at once if a law requires it, if a compelling reason under Dutch law allows it, or if the Agency has repeatedly breached these terms. We then give the reasons by email without undue delay, unless a law forbids it or the Agency has repeatedly breached these terms.

B6.3 The Agency can explain the facts and circumstances of such a measure as described in B7. If we revoke a measure, we reinstate the page without undue delay.

B7. Complaints

An Agency can send a complaint about its page, a measure under B6, a technical problem or how we apply these terms to support@huisly.nl, with "Agency complaint" in the subject. We consider the complaint and reply where appropriate. Huisly is a small enterprise, so the rules of the Platform-to-Business Regulation on an internal complaint-handling system and on mediators (Articles 11 and 12 of Regulation (EU) 2019/1150) don't apply to it.

B8. Ending a claim

The Agency can withdraw a claim that is still waiting for review in Huisly for business, and can end an approved claim at any time by emailing support@huisly.nl. Its page then becomes unclaimed again and shows only public information. An agency that hasn't claimed its page can ask support@huisly.nl to correct or remove details on it.

C1. Data processing: what is processed

Part C is the data processing agreement under Article 28 GDPR. It applies to the personal data the Customer records in the agent dashboard of Huisly for business (section 2.3), and in any other feature of Huisly for business that stores personal data on the Customer's behalf ("Customer Personal Data"). For that data the Customer is the controller and Huisly is the processor. If Part C and the rest of these terms differ, Part C prevails for Customer Personal Data.

Item	Description
Subject matter and purpose	Keeping the Customer's clients and their saved listing searches in the agent dashboard, showing them to the Customer's members, and finding listings on Huisly that fit those searches, only to provide the agent dashboard to the Customer. Huisly doesn't contact the Customer's clients.
Nature of the processing	Storing, showing, searching, changing, archiving and deleting the data, and comparing saved searches with listings, as the agent dashboard does on the Customer's instructions.
Duration	For as long as the Customer's organisation exists, and until deletion under C8.
Data subjects	The Customer's clients and prospective clients whom its members record, and the Customer's members who record them.
Rights and obligations of the Customer	Those of a controller under the GDPR, as set out in Part C: the Customer gives the instructions, has a legal basis for the data and informs the people concerned, and has the rights in C2 to C9.
Types of personal data	For each client: a name and, if the Customer enters them, an email address, a phone number and a note; whether the client is active or archived; the client's saved listing searches (places, rent or buy, and filters) and up to when its matches were seen; and which member added the client or search, and when. The Customer doesn't enter special categories of personal data (Article 9 GDPR), criminal records or citizen service numbers (BSN).

The Customer makes sure it has a legal basis for the data it enters and informs the people concerned as the GDPR requires.

C2. Instructions

Huisly processes Customer Personal Data only on the Customer's documented instructions, also with regard to transfers outside the European Economic Area. These terms and the Customer's use and settings of the feature are those instructions; other instructions require Huisly's agreement. Huisly doesn't use Customer Personal Data for its own purposes. If an instruction would in Huisly's view breach the GDPR, Huisly tells the Customer immediately. If EU or Dutch law requires other processing, Huisly tells the Customer first unless that law forbids it.

C3. Confidentiality of processing

Only people who need access to provide or support the feature have it, and they're bound to confidentiality.

C4. Security

Huisly takes the technical and organisational measures required by Article 32 GDPR. They currently include encryption in transit, encrypted storage volumes, access control, separation of each organisation's data and backups. Huisly may change the measures, as long as they remain appropriate.

C5. Sub-processors

C5.1 The Customer gives general authorisation for Huisly to use sub-processors. Current sub-processors:

Sub-processor	Role	Location
Hetzner Online GmbH	Servers, database and file storage, and the mail server	Germany (Nuremberg)
Scaleway SAS	Copies of backups	Netherlands (Amsterdam)
Cloudflare, Inc.	Network, security and delivery: traffic to the API and the website passes through Cloudflare	Worldwide network; Cloudflare relies on its EU-US Data Privacy Framework certification and standard contractual clauses

Emails are sent through Huisly's own mail server, which runs at Hetzner in Nuremberg; it is not a separate sub-processor. Paddle isn't a sub-processor: it is the merchant of record and a controller for payment data. A sign-in provider the Customer's members choose, such as Google, isn't a sub-processor either.

C5.2 Huisly informs the Customer of an intended new or replacement sub-processor a reasonable time before the change, by updating the list in C5.1 and by email to the organisation's owners. The Customer can object on reasonable data-protection grounds by email before the change takes effect. If Huisly doesn't meet the objection, the Customer's only remedy is to stop using the feature or end the agreement, free of charge.

C5.3 Huisly imposes the same data-protection obligations on each sub-processor by contract and stays responsible to the Customer for them, as Article 28(4) GDPR requires.

C6. Transfers outside the EEA

Huisly transfers Customer Personal Data outside the European Economic Area only with appropriate safeguards under Chapter V GDPR, such as an adequacy decision or standard contractual clauses.

C7. Assistance and breaches

C7.1 Taking into account the nature of the processing and the information available to Huisly, Huisly helps the Customer answer requests from data subjects (access, correction, deletion and so on) and meet its obligations under Articles 32 to 36 GDPR. Most requests can be handled by the Customer itself in the agent dashboard: its members can see, correct and archive a client's details, and an owner or an admin can delete them. Requests that reach Huisly directly are referred to the Customer. Huisly may charge reasonable costs for help that goes beyond what the feature offers.

C7.2 Huisly notifies the Customer by email without undue delay after becoming aware of a personal data breach affecting Customer Personal Data. It gives the information it has that the Customer needs to assess and report the breach, as that information becomes available. The Customer decides whether to notify the supervisory authority and data subjects.

C8. End of processing

C8.1 Customer Personal Data stays stored until the Customer deletes it. An owner or an admin can delete an archived client, with its saved searches, in the agent dashboard; archiving alone deletes nothing. If the Customer stops using the agent dashboard but keeps its organisation, the data stays until the Customer deletes it or the organisation is closed.

C8.2 Within 30 days after the agreement ends, the Customer can ask, by email at support@huisly.nl, for a copy of Customer Personal Data or for its deletion; there is no self-service export. Huisly provides the copy within a reasonable period, in a common format it chooses. Huisly then closes the organisation, or does so within a reasonable period after those 30 days if the Customer asks for nothing.

C8.3 When an organisation is closed, a daily job deletes its Customer Personal Data within 30 days. This doesn't apply where EU or Dutch law requires Huisly to keep the data. Copies in backups aren't deleted one by one; they are kept as described in the Huisly Privacy Policy and are used only to restore the service. The copies of backups at Scaleway are currently not removed automatically, so Customer Personal Data in them stays there until Huisly deletes those copies.

C9. Audits

Huisly makes available the information needed to show it meets Article 28 GDPR, in the first place in writing, for example by answering the Customer's reasonable written questions. If that information isn't enough, or a supervisory authority requires it, the Customer may have an audit or inspection performed by itself or by an independent auditor bound to confidentiality: at the Customer's cost, including Huisly's reasonable costs, no more than once a year unless a supervisory authority requires more, with at least 30 days' notice, during business hours and without disrupting the Service.

C10. Responsibility

Each party is responsible for its own obligations under the GDPR. The limits in section 14 apply to Part C, except where the GDPR or other law doesn't allow them.