Deze pagina vat rollen, GDPR-principes en klantverantwoordelijkheden samen.
Roles
For website visitors and direct customer account management, the Kairos Ai operator may act as data controller. For Meta Ads data processed on behalf of a customer, the operator may act as processor or service provider depending on the final customer agreement. Belangrijk: This localized legal text should be reviewed by counsel before launch for the selected jurisdiction, company details, tax rules and customer type.
Customer responsibilities
Customers must ensure they have a lawful basis and required permissions to connect advertising accounts, upload business data and allow Kairos Ai to process campaign and performance information. Belangrijk: This localized legal text should be reviewed by counsel before launch for the selected jurisdiction, company details, tax rules and customer type.
Processing purposes
Processing may include account authentication, campaign analysis, AI recommendation generation, reporting, billing, security, support, abuse prevention and legal compliance. Belangrijk: This localized legal text should be reviewed by counsel before launch for the selected jurisdiction, company details, tax rules and customer type.
Legal bases
Possible legal bases include performance of a contract, legitimate interests, consent where required, compliance with legal obligations and customer instructions for processor activities. Belangrijk: This localized legal text should be reviewed by counsel before launch for the selected jurisdiction, company details, tax rules and customer type.
Data subject rights
Individuals may request access, correction, deletion, restriction, portability or objection where applicable. Requests should be sent to info@kairosadvision.com and may require identity verification. Belangrijk: This localized legal text should be reviewed by counsel before launch for the selected jurisdiction, company details, tax rules and customer type.
International transfers
Data may be processed in countries where hosting, payment, AI or support providers operate. Appropriate safeguards should be documented before production launch where legally required. Belangrijk: This localized legal text should be reviewed by counsel before launch for the selected jurisdiction, company details, tax rules and customer type.
Subprocessors
The final subprocessor list should include hosting, database, payment, email, analytics, logging, security and AI vendors. Customers should be notified of material changes where required by contract or law. Belangrijk: This localized legal text should be reviewed by counsel before launch for the selected jurisdiction, company details, tax rules and customer type.
Security measures
Recommended measures include encrypted transport, secret management, access controls, audit logs, backups, environment separation, least-privilege API permissions and incident response procedures. Belangrijk: This localized legal text should be reviewed by counsel before launch for the selected jurisdiction, company details, tax rules and customer type.
Data Processing Agreement
Business customers may require a Data Processing Agreement. A final DPA should define subject matter, duration, data categories, subprocessors, confidentiality, security, deletion and audit rights. Belangrijk: This localized legal text should be reviewed by counsel before launch for the selected jurisdiction, company details, tax rules and customer type.
Required completion
Before launch, this page must be completed with the legal entity, registered address, contact person, DPA terms, subprocessor list and jurisdiction-specific KVKK/GDPR details. Belangrijk: This localized legal text should be reviewed by counsel before launch for the selected jurisdiction, company details, tax rules and customer type.