Privacy Policy

Data Controller

growljqwl B.V. is the data controller responsible for your personal data. Our company details are:

Data Collection

The data we collect includes personal information such as your name, email address, phone number, company details, and any other information you provide when contacting us or using our services. We also collect technical information about your visit to our website, including your IP address, browser type, device information, and pages visited.

We collect this information through various means including contact forms, email communications, phone calls, cookies, and analytics tools. All data collection is done in accordance with applicable privacy laws and regulations.

Types of Personal Data We Collect:

• Contact Information: Name, email address, phone number, postal address
• Professional Information: Company name, job title, business requirements
• Communication Data: Records of our communications with you
• Technical Data: IP address, browser type, device information, website usage data
• Marketing Data: Your preferences for receiving marketing communications

How We Use Your Information

We explain how we use your information in this section to ensure complete transparency about our data processing activities. The use of your data is always based on a lawful basis under GDPR, including legitimate interests, contract performance, or your explicit consent.

We use your personal information for the following purposes:

Legal Basis for Processing:

• Contract Performance: To provide our software engineering services and fulfill contractual obligations
• Legitimate Interests: To improve our services, conduct business operations, and maintain client relationships
• Consent: For marketing communications and optional data processing activities
• Legal Obligation: To comply with applicable laws and regulations

Specific Uses of Your Data:

• Responding to your enquiries and providing customer support
• Delivering our software engineering services
• Processing payments and managing invoices
• Sending service-related communications
• Improving our website and services based on usage analytics
• Complying with legal and regulatory requirements
• Protecting against fraud and ensuring security

Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except as described in this policy. We may share your information with:

• Service Providers: Trusted third-party companies that assist us in operating our website and conducting business
• Legal Authorities: When required by law or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of business assets

All third-party service providers are contractually bound to protect your personal information and use it only for the specified purposes.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The specific retention periods depend on the type of data and the purpose for processing:

• Contact enquiries: 3 years from last contact
• Client data: 7 years after contract termination (for legal compliance)
• Website analytics: 26 months maximum
• Marketing data: Until consent is withdrawn or 3 years of inactivity

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights regarding your personal data:

• Right of Access: Request information about the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for processing where applicable

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website usage. For detailed information about our use of cookies, please see our Cookie Policy.

You can control cookie settings through your browser preferences and our cookie consent banner. Some cookies are essential for website functionality, while others require your consent.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Staff training on data protection practices
• Secure hosting and backup procedures

International Data Transfers

As a company based in the Netherlands, we primarily process data within the European Economic Area (EEA). If we need to transfer your data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses approved by the European Commission.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Information

If you have any questions about this Privacy Policy, want to exercise your rights, or need to contact us about data protection matters, please contact us using the information below:

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe your data protection rights have been violated.

Supervisory Authority

If you have concerns about our data processing practices, you may contact our supervisory authority: