Data processing agreement
Version 1.0 · 15 November 2026 · Translation of the Dutch text; in case of differences the Dutch version prevails.
1. Parties and subject
This data processing agreement is part of every subscription to 123 CRM. You are the controller; 123-NL B.V., located at Hurksestraat 60, 5652 AL Eindhoven, registered with the Dutch Chamber of Commerce (KVK) under number 88560686, is the processor of the personal data you store in 123 CRM.
2. Purpose of processing
We only process the data to provide 123 CRM and only according to your instructions. We do not use it for our own purposes and not to train AI models.
3. Types of data
Contact details of your customers and relations (such as name, email, phone and address), data in quotes, invoices, notes, documents and time records.
4. Security
We take appropriate technical and organisational measures, including encryption, access control, two-step verification, logging and daily backups. Data is stored within the European Union.
5. Sub-processors
We only engage sub-processors for hosting, email delivery and payments, with equivalent agreements. A current list is available on request. We announce new sub-processors in advance.
6. Data breaches
In the event of a data breach we inform you without undue delay and no later than 48 hours after discovering it, so that you can meet your notification obligation.
7. Confidentiality
Everyone at our company who has access to the data is bound by confidentiality.
8. End
After your subscription ends you can export your data for 30 days. After that we delete it, unless a statutory retention obligation applies.