Privacy Policy
1. Introduction
We are a digital marketing business operating in the Netherlands, committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you interact with our website or services. It also outlines your rights under the European Union’s General Data Protection Regulation (GDPR) and how we comply with these regulations.
By using our website or providing your information to us, you agree to the terms of this Privacy Policy. We encourage you to read this policy carefully to understand our practices regarding your personal data.
2. Data Collection and Use
We collect and use personal data only as needed for our legitimate business purposes or to comply with legal obligations. The types of personal data we collect and how we use it include:
- Name, Email Address, and Phone Number: We may collect your name, email, and phone number when you contact us (for example, via a contact form, email, or phone) or sign up for any communications. We use this information to respond to your inquiries, provide the services or information you requested, and maintain communication (such as sending updates about our services if you have requested them).
- Website Analytics Data: When you visit our website, we automatically collect certain information through our analytics tools (such as Google Analytics). This may include your IP address, browser type, device information, pages viewed, and the date/time of your visit. We use this data to analyze how our website is used, to improve our website’s performance, content, and user experience, and to inform our marketing strategies.
- Cookies: Our website uses cookies (small text files placed on your device) to enhance your browsing experience and collect analytics information. Cookies remember your preferences (such as language or other settings) and help us understand website traffic and usage patterns. You can find more details about our use of cookies in Section 6 below.
- Internal Use Only: All personal data we collect is used internally within our company. We do not sell, rent, or share your personal information with third parties for their own marketing purposes. We may use third-party service providers to assist us in operating the website or analyzing data (e.g., website hosting services or analytics providers like Google Analytics), but any such partners are bound by confidentiality and data protection agreements and cannot use your data for other purposes.
3. Legal Basis for Processing Data (GDPR Compliance)
We process your personal data only when we have a legal basis under the GDPR. Depending on the context, one or more of the following legal bases may apply:
- Consent (Article 6(1)(a) GDPR): We will ask for your consent before processing your personal data in situations where consent is required. For example, we obtain your consent to send you marketing emails or to place non-essential cookies (such as analytics cookies) on your device. You have the right to withdraw your consent at any time (see Section 5 on User Rights).
- Performance of a Contract (Article 6(1)(b) GDPR): If you become our client or request our services, we may need to process your personal information to perform a contract with you or to take steps at your request before entering into a contract. For example, we use your contact details to communicate about project details or to provide digital marketing services you have purchased.
- Legitimate Interests (Article 6(1)(f) GDPR): We may process personal data as necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. For instance, we have a legitimate interest in analyzing and improving our services and website performance (using analytics data) or in contacting you in a B2B context regarding services you might be interested in, all while respecting your privacy. When we rely on legitimate interests, we consider and balance any potential impact on you and your rights.
- Legal Obligation (Article 6(1)(c) GDPR): In some cases, we may need to process and retain your data to comply with a legal obligation. For example, we might keep invoice records that include personal data to fulfill tax and accounting requirements or disclose information if required by law or a court order.
4. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or to meet legal and business requirements. We will not keep your data longer than needed:
- Contact and Inquiry Data: If you contact us with an inquiry or become a client, we will retain your personal information for as long as is necessary to respond to you, provide our services, and maintain our records. For example, we may keep correspondence and contact details for a reasonable period after your inquiry or project is completed, in case you have follow-up needs or for our administrative records.
- Marketing Communications: If you have consented to receive marketing emails or newsletters, we will retain your email address and any relevant contact information until you unsubscribe or ask us to delete your information. Each marketing email will include an option to opt out of future communications.
- Website Analytics Data: Analytics data collected via cookies (such as Google Analytics) is retained for the period necessary for analysis and trend identification. These periods are typically determined by our Google Analytics settings (for instance, analytics data may be retained for 14 or 26 months by default). We only view this data in aggregate form, and it is not used to personally identify individuals over long periods.
- Legal Requirements: In cases where we must retain data to comply with legal obligations (e.g., financial records), we will retain the data for the duration required by applicable law. After the retention period expires, or upon your valid request, we will securely delete or anonymize your personal data.
5. User Rights (Access, Deletion, Modification of Data)
As a user or customer, you have various rights regarding your personal data under the GDPR. You may exercise these rights at any time by contacting us (see Section 8 for Contact Information). Your key rights include:
- Right of Access: You have the right to request confirmation of whether we are processing your personal data, and if so, to access the data we hold about you. We will provide a copy of your personal data upon request.
- Right to Rectification: You have the right to request that we correct or update any inaccurate or incomplete personal data we have about you.
- Right to Erasure: You can request that we delete your personal data when it is no longer necessary for the purposes it was collected, or if you believe the processing is unlawful or you object to our processing (see Right to Object below). This is also known as the “right to be forgotten.” Please note, for legal reasons we may not always be able to fulfill an erasure request (for example, if we must keep certain data to comply with a legal obligation), but we will inform you if that is the case.
- Right to Restrict Processing: You have the right to ask us to limit or suspend the processing of your personal data in certain circumstances. For example, you may request restriction if you contest the accuracy of your data or if you want us to retain data but not actively use it while you pursue an objection to processing.
- Right to Data Portability: For data that you have provided to us and that we process by automated means based on your consent or a contract with you, you have the right to request a copy in a structured, commonly used, machine-readable format. You can also request that we transmit this data to another data controller where technically feasible.
- Right to Object: You have the right to object to our processing of your personal data when such processing is based on our legitimate interests. If you object, we will re-evaluate your request and will cease processing your data for that purpose unless we have compelling legitimate grounds to continue. You can always object to the use of your personal data for direct marketing purposes, and if you do, we will stop using your data for that purpose immediately.
- Right to Withdraw Consent: If we are processing your personal data based on your consent, you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of any processing we conducted prior to your withdrawal. For example, you can unsubscribe from our newsletter at any time, and we will stop sending it.
- Right to Lodge a Complaint: If you have concerns about how we are handling your personal data, you have the right to lodge a complaint with a data protection supervisory authority. Our company is under the jurisdiction of the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). You may also contact your local supervisory authority within the European Union.
6. Data Security Measures
We take appropriate technical and organizational measures to ensure the security of the personal data we collect and process. These measures are designed to protect your information against unauthorized access, loss, alteration, or destruction. Some of the steps we take include:
- Secure data storage and encryption:
Personal data is stored on secure servers and may be encrypted to prevent unauthorized access. - Access controls:
Only authorized personnel have access to personal data, and this access is strictly limited to what is necessary to perform their job functions. - Regular security assessments:
We conduct regular reviews and assessments of our security policies and procedures to ensure they remain effective and up-to-date. - Incident response plans:
In the event of a data breach or other security incident, we have protocols in place to respond quickly, minimize impact, and notify relevant parties, as required by applicable law.
Please note that while we strive to maintain robust data security measures, no system can be completely secure. As a result, we cannot guarantee the absolute security of your information. If you suspect any unauthorized access to or misuse of your personal data, please contact us immediately.
7. Use of Cookies and Google Analytics
Cookies: We use cookies on our website to improve functionality and user experience. Cookies are small text files that are stored on your device when you visit a website. They allow the website to remember your actions and preferences (such as login, language, and other display preferences) over a period of time, so you don’t have to re-enter them whenever you come back to the site or browse from one page to another. We use the following types of cookies:
- Essential Cookies: These are necessary for the website to function and cannot be switched off in our systems. They are usually set only in response to actions made by you, such as filling in forms or setting your privacy preferences. You can set your browser to block these cookies, but some parts of the site may not work properly if you do.
- Analytics Cookies: We use analytics cookies (for example, Google Analytics cookies) to collect information about how visitors use our site. This helps us understand which pages are popular, how users move through the site, and where we can improve the user experience. The data collected is aggregated and anonymous. It includes information such as the number of visitors to the site, the pages they visited, and the time spent on the site.
You can control or delete cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or notify you when new cookies are set. Please note that disabling certain cookies may affect the functionality of our website.
Google Analytics: We utilize Google Analytics, a web analytics service provided by Google LLC, to help us analyze how users use our website. Google Analytics uses cookies to collect information such as your IP address, browser type, referring pages, and the time you spend on our site. This information is transmitted to Google servers (which may be located outside the European Union, including in the United States) and analyzed to compile reports on website activity.
We have configured Google Analytics to enhance privacy:
- We use IP anonymization, which means that Google will truncate/anonymize the last octet of your IP address within EU member states before storing it, so it is not stored in a way that can identify you.
- We have entered into a Data Processing Addendum with Google, which means Google acts as a data processor and is contractually bound to handle the data in compliance with GDPR.
- We do not use other Google Analytics features that would allow Google to use the data for its own purposes (such as advertising features) without your consent.
The information collected via Google Analytics is used strictly for our internal analysis of website usage and to improve our services and website functionality. We do not share Google Analytics data with any third parties.
If you prefer not to have your site activity tracked by Google Analytics, you can:
- Decline analytics cookies when you first visit our site through our cookie consent banner (if applicable).
- Use the Google Analytics Opt-out Browser Add-on, which prevents Google Analytics from collecting information on your visits to websites: https://tools.google.com/dlpage/gaoptout.
We take data security seriously and implement appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:
- Encryption: Our website uses SSL/TLS encryption to protect data transmitted between your browser and our site (you can see this as the padlock icon in your browser’s address bar).
- Access Controls: We limit access to personal data to those employees or contractors who need it to perform their job duties and are bound by confidentiality obligations. Any third-party service providers handling personal data (such as our website host or analytics provider) are required to implement strong security measures and process data in compliance with GDPR.
- Data Minimization: We only collect and process the personal data that we need for the purposes described in this policy, and we do our best to anonymize or pseudonymize data where feasible, especially for analytics.
- Monitoring and Testing: We regularly review our information collection, storage, and processing practices, and we periodically test and update our security measures to address new threats.
Despite our efforts to secure your data, no method of transmission over the internet or electronic storage is completely secure. Therefore, while we strive to protect your personal data, we cannot guarantee its absolute security. In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and the appropriate authorities as required by law.
8. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us using the information below. We will respond to your inquiry as soon as possible, and within the timeframes required by law for any data rights requests.
- Company Name: DiG – Digital Intelligence & Growth
- Address: Doctor van Rooijenstraat 24, 4401KH, Yerseke, Netherlands
- Email: info@digmarketing.nl
- Phone: +31644983982