Privacy Statement

for third party services

wave

Privacy statement for third-party services

Johan uses a number of services from external parties. We may share (some of) your personal data with one or more of these suppliers. Our starting point is that these suppliers must be demonstrably compliant with the AVG and have a security policy that meets strict standards, such as the ISO 2700x series.

We enter into a processor agreement with all these suppliers. This guarantees you, the user, that your personal data is processed in accordance with the AVG, the General Data Protection Regulation.

We periodically audit our suppliers for their security and privacy policies.


These suppliers are:

  • True BV: for hosting our web application app.johan.nl and our data.
    We use the hosting party True BV to host our web servers and database servers on app.johan.nl. Hosting takes place in a Tier III data center in the Netherlands, which meets ISO27001, NEN750, ISO9001 and ISAE 3402 type II standards. Data is stored on dedicated servers in the Netherlands. No third-party storage capacity is used by the data center, including for our backups.

  • TransIP: for hosting our corporate website.
    We use the hosting provider TransIP to host our web servers for www.johan.nl.

  • Cloudflare: to secure our website.
    We use Cloudflare for additional security of network traffic to our web servers. Cloudflare does not perform or use any analysis on your personal data.

  • Google Analytics: to analyze the use of our website.
    JOHAN uses Google Analytics on the websites www.johan.nl and help.johan.nl to analyze the use of the website and to compile reports on website activity. We have set this up to be as privacy-friendly as possible, in accordance with the guidelines set by the Dutch Data Protection Authority. Your IP address is only passed on anonymously. "Data sharing" has been disabled in Google Analytics and we do not use other Google services in combination with Google Analytics. The retention period has been set as short as possible.

  • Bird CRM: for sending SMS messages.
    If you use two-factor authentication to log in to our application app.johan.nl, we use Bird CRM to send you an SMS with a security code. The only information we share with Bird CRM for this purpose is your mobile phone number.

  • Sparkpost and Mailchimp: for sending email messages.
    We use Sparkpost to send occasional email messages from app.johan.nl. We use Mailchimp to send email messages to our newsletter subscribers. In both cases, we only use your email address for this purpose. No other personal data is shared with Sparkpost and/or Mailchimp.

  • Uploadcare: for storing images.
    We use Uploadcare as a content delivery network. We use this for storing images. We do not share any personal data with uploadcare.

  • Intercom: for handling support questions and offering our help center (help.johan.nl).
    We use the "Intercom" platform to handle support questions. If you send an email to support@johan.nl, your email address will be shared with Intercom. We do not share any other personal data about you with Intercom. If you receive a response to a support question, it will be answered from johan.intercom-mail.com.

Have privacy-related questions? Email privacy@johan.nl