Who is responsible & applicable law

Stackhavn B.V., is responsible for processing personal data as described in this privacy notice and in accordance with applicable laws and regulations. 

Who does this apply to, and when?

This privacy notice applies to:

• visitors of our website/platform; and

• people who contact us (e.g., support or questions).
  
  

What personal data do we process?

We may process the following categories of personal data:

Data you provide to us:

• name;

• e-mail address;

• the content of communications you send us (e.g., emails/support questions) (if applicable).

Data collected automatically:

• device and technical data (e.g., device type, browser);

• usage data (e.g., which pages you visit and how you use the platform).
  
  

What do we use your data for?

We use personal data to:

• provide and personalize our services; 

• personal data breaches. In the event of a personal data breach, we will notify affected individuals and any applicable regulators in accordance with our legal obligations;

• improve performance and user experience;

• comply with legal obligations.
  
  

Legal bases for processing

We process personal data only where we have a legal basis under the GDPR, such as:

• performance of a contract (GDPR Art. 6(1)(b));

• legal obligation (GDPR Art. 6(1)(c));

• legitimate interests (GDPR Art. 6(1)(f));
  
  

Who do we share personal data with?

We do not sell your personal data. 

We may share personal data with trusted service providers when necessary to provide and improve our services (e.g., hosting and analytics).

Categories of recipients:

• hosting or infrastructure providers (EEA);

• email or support tooling (if applicable) (EEA);

• professional advisers (legal/financial) where needed;

• public authorities where we are legally required to do so.
  
  

Data breach

In the event of a personal data breach, we will notify affected individuals and any applicable regulators in accordance with our legal obligations.

Transfers outside the EEA

We process and store personal data within the European Economic Area (EEA).

Retention periods 

We do not keep personal data longer than necessary for the purposes in this notice, unless a longer retention period is required by law.

We use the following retention periods.

• Contact and support requests (email/messages): 12 months after closure.

• Technical logs (security/incidents): 90 days.

• Platform analytics: 14 months (or shorter, depending on your settings).

• Legal and compliance data: as long as legally required or necessary for handling claims or disputes.
  
  

Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse. 

Automated decision-making and profiling

We do not use automated decision-making (including profiling) that produces legal effects concerning you or similarly significantly affects you.

General Data Protection Regulation (GDPR) rights

Regarding your personal data, you have the right to:

• obtain access;

• request rectification;

• request erasure (in certain cases);

• object to certain processing;

• withdraw consent (where processing is based on consent);

• request restriction of processing (where applicable);

• request data portability (where applicable).
  
  

 Right to lodge a complaint

If you believe we are not handling your personal data correctly, you have the right to lodge a complaint with the supervisory authority: Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes

We may amend this privacy notice from time to time. The most recent version will always be available via our website and will include an updated date.

Applicable law

This privacy notice shall be governed by and construed in accordance with the laws of the Netherlands, without regard to its conflict of law principles. Any legal action or proceeding arising out of or in connection with this privacy notice shall be brought exclusively in the courts located in the Netherlands, and each party irrevocably submits to the exclusive jurisdiction thereof.

Contact

Privacy questions or requests: contact@stackhavn.com.