Privacy Policy

Data Controller

thecahl B.V. is the data controller responsible for your personal data. Our contact information is as follows:

Data Collection and Information We Collect

The data we collect includes personal information that you voluntarily provide to us when using our website and services. We collect information in several ways to provide and improve our services to you.

The types of personal data we may collect include:

• Contact Information: Name, email address, phone number, and postal address when you contact us or subscribe to our content
• Communication Data: Messages, feedback, and other communications you send to us
• Technical Data: IP address, browser type, operating system, referring URLs, and device information
• Usage Data: Information about how you use our website, including pages visited, time spent, and interaction patterns
• Cookie Data: Information collected through cookies and similar tracking technologies (see our Cookie Policy for details)

How We Use Your Information

We explain how we use your information collected through our website and services for various legitimate business purposes. The use of your data helps us provide, maintain, and improve our services while ensuring compliance with applicable laws.

We use your personal data for the following purposes:

• Service Provision: To provide you with our content, respond to your inquiries, and deliver the services you request
• Communication: To send you updates, newsletters, and other communications related to our services (with your consent where required)
• Website Improvement: To analyze website usage patterns and improve user experience
• Legal Compliance: To comply with legal obligations and protect our legal rights
• Security: To maintain the security and integrity of our website and services
• Marketing: To send you marketing communications about our services (where you have consented or we have a legitimate interest)

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: Where you have given clear consent for us to process your personal data for specific purposes
• Contract: Where processing is necessary for the performance of a contract with you
• Legal Obligation: Where we need to comply with legal requirements
• Legitimate Interest: Where we have a legitimate business interest that doesn't override your fundamental rights

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following limited circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our website and conducting business
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfer: In connection with any merger, sale of assets, or acquisition of all or a portion of our business
• Protection: To protect the rights, property, or safety of thecahl, our users, or others

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with our legal obligations. Our retention periods vary depending on the type of data and the purpose for which it was collected:

• Contact Information: Retained for the duration of our business relationship and up to 7 years after for legal compliance
• Website Usage Data: Typically retained for 2 years for analytics purposes
• Marketing Data: Retained until you withdraw consent or unsubscribe from our communications
• Legal Documentation: Retained as required by applicable laws and regulations

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights regarding your personal data:

• Right of Access: You can request access to your personal data and information about how we process it
• Right to Rectification: You can request correction of inaccurate or incomplete personal data
• Right to Erasure: You can request deletion of your personal data in certain circumstances
• Right to Restrict Processing: You can request limitation of processing in certain situations
• Right to Data Portability: You can request transfer of your data to another controller
• Right to Object: You can object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: You can withdraw consent at any time where processing is based on consent

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Employee training on data protection
• Incident response procedures

International Data Transfers

We primarily process data within the European Union. If we need to transfer your data outside the EU, we ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or other legally approved transfer mechanisms.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website usage. For detailed information about our use of cookies, please refer to our Cookie Policy.

Children's Privacy

Our services are not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to remove that information from our servers.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the new privacy policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Information and Complaints

If you have any questions about this privacy policy, want to exercise your rights, or need to contact us regarding your personal data, please reach out to us using the following contact information:

If you are not satisfied with our response or believe we are not processing your personal data in accordance with the law, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.