Privacy Policy

The controller responsible for data processing is:

Parvum B.V.
Peppelkade 21
3992 AL Houten
The Netherlands
Email: support@parvum.com
Phone: +31 30 700 9748

Thank you for your interest in our website. Protecting your privacy is very important to us. Below we provide you with detailed information on how we handle your data.

Access data and hosting

You can visit our website without providing any personal information. Each time a web page is accessed, the web server merely automatically stores a so-called server log file which contains, for example, the name of the requested file, your IP address, the date and time of access, the volume of data transferred and the requesting provider (access data), and documents the access. This access data is analysed exclusively for the purpose of ensuring the trouble-free operation of the website and improving our offering. This serves to protect our legitimate interests, which prevail in the context of a balancing of interests, in the correct presentation of our offering pursuant to Art. 6(1)(f) GDPR.

All access data is deleted no later than one month after the end of your visit to the website.

Hosting

Our online shop is operated on the Shopify platform. The services for hosting and displaying the website are provided by Shopify International Limited, 2nd Floor, 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”), and, where applicable, by other service providers acting as processors on our behalf. Unless otherwise stated in this privacy policy, all access data and all data collected in the forms provided for this purpose on this website are processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

Our service providers are based in and/or use servers in the following countries, for which the European Commission has determined by decision that they ensure an adequate level of data protection: Canada, New Zealand, Japan, United Kingdom, USA. The adequacy decision for the USA serves as the basis for the transfer to a third country, insofar as the respective service provider is certified. Insofar as the respective service provider is not certified, the data transfer is based on standard contractual clauses of the European Commission. Our service providers are based in and/or use servers in these countries: Australia, India, Singapore. No adequacy decision of the European Commission exists for these countries. Our cooperation with them is based on these safeguards: standard contractual clauses of the European Commission.

Data processing for contract performance and for contacting us

2.1 Data processing for contract performance

For the purpose of performing the contract (including enquiries about and the handling of any existing claims under statutory warranty, performance disruption and withdrawal law, as well as any statutory update obligations) pursuant to Art. 6(1)(b) GDPR, we collect personal data if you provide it to us voluntarily as part of your order. Mandatory fields are marked as such, since in these cases we necessarily require the data to perform the contract and cannot dispatch the order without it. The data collected can be seen in the respective input forms. Further information on the processing of your data, in particular on its disclosure to our service providers for the purpose of order, payment and shipment handling, can be found in the following sections of this privacy policy. After the contract has been fully performed, your data will be restricted from further processing and deleted after expiry of the retention periods under tax and commercial law pursuant to Art. 6(1)(c) GDPR, unless you have expressly consented to further use of your data pursuant to Art. 6(1)(a) GDPR or we reserve the right to use the data in a further manner that is permitted by law and about which we inform you in this policy.

2.2 Customer account

Insofar as you have given your consent to this pursuant to Art. 6(1)(a) GDPR by choosing to open a customer account, we use your data for the purpose of opening the customer account and storing your data for further future orders on our website. You can delete your customer account at any time, either by sending a message to the contact option described in this privacy policy or via a function provided for this purpose in the customer account. After your customer account has been deleted, your data will be deleted, unless you have expressly consented to further use of your data pursuant to Art. 6(1)(a) GDPR or we reserve the right to use the data in a further manner that is permitted by law and about which we inform you in this policy.

Contacting us

In the course of customer communication, we collect personal data to process your enquiries pursuant to Art. 6(1)(b) GDPR if you provide it to us voluntarily when contacting us (e.g. via contact form, live chat tool or email). Mandatory fields are marked as such, since in these cases we necessarily require the data to process your enquiry. The data collected can be seen in the respective input forms. After your enquiry has been fully processed, your data will be deleted, unless you have expressly consented to further use of your data pursuant to Art. 6(1)(a) GDPR or we reserve the right to use the data in a further manner that is permitted by law and about which we inform you in this policy.

Data processing for the purpose of shipment handling

For the performance of the contract pursuant to Art. 6(1)(b) GDPR, we pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of the ordered goods. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

Disclosure of data to shipping service providers for the purpose of delivery notification

If you have given us your express consent to this during or after your order, we pass on your email address and telephone number to the selected shipping service provider on the basis of that consent pursuant to Art. 6(1)(a) GDPR, so that the provider can contact you before delivery for the purpose of announcing or arranging the delivery. You can withdraw your consent at any time by sending a message to the contact option described in this privacy policy. After withdrawal, we will delete the data you provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use the data in a further manner that is permitted by law and about which we inform you in this policy. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

Data processing for payment handling

When processing payments in our online shop, we work with these partners: technical service providers, credit institutions, payment service providers.

4.1 Data processing for transaction handling

Depending on the payment method selected, we pass on the data required to process the payment transaction to our technical service providers, to the credit institutions commissioned or to the selected payment service provider, insofar as this is necessary for processing the payment. This serves the performance of the contract pursuant to Art. 6(1)(b) GDPR. In some cases, the payment service providers collect the data required for processing the payment themselves, e.g. on their own website or via a technical integration in the ordering process. In this respect, the privacy policy of the respective payment service provider applies. Depending on the payment method selected, data may be transferred to third countries outside the EU/EEA for which the European Commission has determined by decision that they ensure an adequate level of data protection. Insofar as data is transferred to third countries outside the EU/EEA for which the European Commission has not adopted an adequacy decision, the cooperation is based on standard contractual clauses of the European Commission. If you have any questions about our payment processing partners or the basis of our cooperation with them, please use the contact option stated in this privacy policy.

4.2 Data processing for the purpose of fraud prevention and the optimisation of our payment processes

Where applicable, we provide the aforementioned service providers with further data, which they use together with the data required for processing the payment for the purpose of fraud prevention and optimising our payment processes (e.g. invoicing, processing disputed payments, accounting support). Pursuant to Art. 6(1)(f) GDPR, this serves to protect our legitimate interests, which prevail in the context of a balancing of interests, in protecting ourselves against fraud and in efficient payment management.

4.3 Identity and credit check when selecting Klarna payment services

Klarna invoice, Klarna direct debit, Klarna instalments

If you choose the payment services of Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter Klarna), we ask for your consent pursuant to Art. 6(1)(a) GDPR to transfer to Klarna the data required for processing the payment and for an identity and credit check. The credit reference agencies named in Klarna’s privacy policy may be used for the identity and credit check. Klarna uses the information obtained on the statistical probability of a payment default to make a balanced decision on the establishment, performance or termination of the contractual relationship. You can withdraw your consent at any time by sending a message to the contact option stated in this privacy policy. As a result, we may no longer be able to offer you certain payment options. You can also withdraw your consent to this use of personal data at any time vis-à-vis Klarna.

Email advertising

5.1 Email newsletter with subscription and newsletter tracking

If you subscribe to our newsletter, we use the data required for this purpose or provided separately by you in order to send you our email newsletter regularly on the basis of your consent pursuant to Art. 6(1)(a) GDPR.

You can unsubscribe from the newsletter at any time, either by sending a message to the contact option described below or via a link provided for this purpose in the newsletter.

After you unsubscribe, we will delete your email address from the list of recipients, unless you have expressly consented to further use of your data pursuant to Art. 6(1)(a) GDPR or we reserve the right to use the data in a further manner that is permitted by law and about which we inform you in this policy.

Please note that we analyse your user behaviour when sending the newsletter. For this purpose, we also analyse your interaction with our newsletter by measuring, storing and evaluating open rates and click rates for the purpose of designing future newsletter campaigns (“newsletter tracking”). For this analysis, the emails sent contain single-pixel technologies (e.g. so-called web beacons, tracking pixels) that are stored on our website. For the analyses, we link in particular the following “newsletter data”:

the page from which the page was requested (so-called referrer URL),
the date and time of access,
the description of the type of web browser used,
the IP address of the requesting computer,
the email address,
the date and time of subscription and confirmation

and the single-pixel technologies with your email address or your IP address and, where applicable, an individual ID. Links contained in the newsletter may also contain this ID.

If you do not want newsletter tracking, you can unsubscribe from the newsletter at any time, as described above. The information is stored for as long as you are subscribed to the newsletter.

5.2 Newsletter dispatch

The newsletter and the newsletter tracking described above are sent by Klaviyo, Inc., 125 Summer Street, Floor 6, Boston, MA 02110, USA (“Klaviyo”), acting as a processor on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

Our service providers are based in and/or use servers in the following countries, for which the European Commission has determined by decision that they ensure an adequate level of data protection: USA, United Kingdom. The adequacy decision for the USA serves as the basis for the transfer to a third country, insofar as the respective service provider is certified. Certification is in place. Our service providers are based in and/or use servers in these countries: Australia, Singapore. No adequacy decision of the European Commission exists for these countries. Our cooperation with them is based on these safeguards: standard contractual clauses of the European Commission.

5.3 Sending review requests by email

If you have given us your express consent to this pursuant to Art. 6(1)(a) GDPR during or after your order, we use your email address to ask you to submit a review of your order via the review systems Trustpilot and WebwinkelKeur that we use. You can withdraw this consent at any time by sending a message to the contact option described in this privacy policy or via a link provided for this purpose in the review request. After you have withdrawn your consent, we will delete your email address from the list of recipients, unless you have expressly consented to further use of your data pursuant to Art. 6(1)(a) GDPR or we reserve the right to use the data in a further manner that is permitted by law and about which we inform you in this policy.

The review requests are sent by Trustpilot A/S, Pilestræde 58, 5. Etage, 1112 Copenhagen K, Denmark (“Trustpilot”), and Stichting WebwinkelKeur, The Netherlands (“WebwinkelKeur”), acting as processors on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

Cookies and other technologies

6.1 General information

In order to make visiting our website attractive and to enable the use of certain functions, we use technologies on various pages, including so-called cookies. Cookies are small text files that are automatically stored on your terminal device. Some of the cookies we use are deleted again after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your terminal device and enable us to recognise your browser on your next visit (persistent cookies). You can find the storage duration in the overview in the cookie settings of your web browser.

Privacy protection for terminal devices

When you use our online offering, we use strictly necessary technologies in order to be able to provide the digital service you have expressly requested. In this respect, the storage of information on your terminal device or access to information already stored on your terminal device does not require consent.

For functions that are not strictly necessary, the storage of information on your terminal device or access to information already stored on your terminal device requires your consent. Please note that if you do not give your consent, parts of the website may not be fully usable. Any consent you have given remains in effect until you adjust or reset the respective settings on your terminal device.

Any subsequent data processing by cookies and other technologies

We use technologies that are strictly necessary for the use of certain functions of our website. These technologies collect and process the IP address, time of visit, device and browser information and information on your use of our website. This serves to protect our legitimate interests, which prevail in the context of a balancing of interests, in an optimised presentation of our offering pursuant to Art. 6(1)(f) GDPR.

We also use technologies to fulfil the legal obligations to which we are subject (e.g. to be able to demonstrate consent to the processing of your personal data) as well as for web analytics and online marketing. Further information on this, including the respective legal basis for the data processing, can be found in the following sections of this privacy policy.

Cookie settings

You can manage the cookie settings in your browser (e.g. Microsoft Edge, Safari, Chrome, Firefox, Opera).

Insofar as you have consented to the use of the technologies pursuant to Art. 6(1)(a) GDPR, you can withdraw your consent at any time by sending a message to the contact option described in the privacy policy.

Alternatively, you can change your settings at any time via the cookie icon or the “Cookie settings” link on our website. If you do not accept cookies, the functionality of our website may be restricted.

6.2 Cookiebot consent management platform

On our website we use Cookiebot to inform you about the cookies and other technologies we use on our website and to obtain, manage and document any consent you may need to give to the processing of your personal data by these technologies. Pursuant to Art. 6(1)(c) GDPR, this is necessary to fulfil our legal obligation under Art. 7(1) GDPR, to which we are subject, to be able to demonstrate your consent to the processing of your personal data. Cookiebot is an offering of Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, which processes your data on our behalf. After you submit your cookie declaration on our website, the Cookiebot web server stores your anonymised IP address, the date and time of your declaration, browser information, the URL from which the declaration was sent, information on your consent behaviour and an anonymous random key. In addition, a cookie is set that contains the information on your consent behaviour and the key. Your data will be deleted after twelve months, unless you have expressly consented to further use of your data pursuant to Art. 6(1)(a) GDPR or we reserve the right to use the data in a further manner that is permitted by law and about which we inform you in this policy. Our service providers are based in and/or use servers in the following countries, for which the European Commission has determined by decision that they ensure an adequate level of data protection: USA. The adequacy decision for the USA serves as the basis for the transfer to a third country, insofar as the respective service provider is certified. Insofar as the respective service provider is not certified, the data transfer is based on standard contractual clauses of the European Commission.

Use of cookies and other technologies

We use the following cookies and other technologies from third-party providers on our website. Unless otherwise stated for the individual technologies, this is done on the basis of your consent pursuant to Art. 6(1)(a) GDPR. Once the purpose no longer applies and we stop using the respective technology, the data collected in this context will be deleted. You can withdraw your consent at any time with effect for the future. Further information on your options for withdrawal can be found in the section “Cookies and other technologies”. Further information, including the basis of our cooperation with the individual providers, can be found under the individual technologies. If you have any questions about the providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

7.1 Use of Google services

We use the technologies of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) described below. The information automatically collected by the Google technologies about your use of our website is generally transferred to a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and stored there. Unless otherwise stated for the individual technologies, the data processing is carried out on the basis of a joint controller agreement concluded for the respective technology pursuant to Art. 26 GDPR. Further information on data processing by Google can be found in Google’s privacy notice. Google LLC is certified under the EU-U.S. Data Privacy Framework; transfers to the USA are therefore covered by the adequacy decision of the European Commission. Insofar as data is transferred to other countries outside the EU and the EEA without an adequacy decision, the transfer is based on standard contractual clauses of the European Commission.

Google Analytics

For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information and information on your use of our website), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. If you visit our website from the EU, your IP address is stored on a server located in the EU in order to derive location data and is then deleted immediately before the traffic is forwarded to other Google servers for processing. The data processing is carried out on the basis of a data processing agreement with Google.

For the purpose of optimised marketing of our website, we have activated the data sharing settings for “Google products and services”. This allows Google to access the data collected and processed by Google Analytics and subsequently use it to improve Google services. The sharing of data with Google within the scope of these data sharing settings is carried out on the basis of an additional controller-to-controller agreement. We have no influence on the subsequent data processing by Google.

For web analytics and advertising purposes, the extension function of Google Analytics enables the so-called DoubleClick cookie to recognise your browser when you visit other websites. Google will use this information to compile reports on website activity and to provide other services related to website usage.

Google Ads

For advertising purposes in Google search results and on third-party websites, the so-called Google remarketing cookie is set when you visit our website, which automatically enables interest-based advertising by collecting and processing data (IP address, time of visit, device and browser information and information on your use of our website) by means of a pseudonymous cookie ID and on the basis of the pages you visit. Further data processing only takes place if you have activated the “personalised advertising” setting in your Google account. In this case, if you are logged in to Google while visiting our website, Google uses your data together with Google Analytics data to create and define target group lists for cross-device remarketing.

For website analysis and event tracking, we use Google Ads conversion tracking to measure your subsequent usage behaviour if you have reached our website via an advertisement from Google Ads. For this purpose, cookies may be used and data (IP address, time of visit, device and browser information and information on your use of our website based on events specified by us, such as visiting a web page or subscribing to the newsletter) may be collected, from which usage profiles are created using pseudonyms.

If you do not give us your consent pursuant to Art. 6(1)(a) GDPR to the use of Google Ads, no cookies are stored on or read from your device. The data processing described in the preceding paragraphs does not take place. In order to close gaps in web analytics through behavioural and conversion modelling, pings containing data (user agent, information on your consent behaviour, screen resolution, IP address, page URL, information on ad clicks in URL parameters) are sent to Google. Your IP address is used to derive the IP country.

Google Fonts

To ensure the uniform display of content on our website, the script code “Google Fonts” collects data (IP address, time of visit, device and browser information), transfers it to Google and Google subsequently processes it. We have no influence on this subsequent data processing.

Google Tag Manager

The Google Tag Manager allows us to manage various codes and services on our website. When implementing the individual tags, Google may also process personal data (e.g. IP address, online identifiers (including cookies)). The data processing is carried out on the basis of a data processing agreement with Google. By using the Google Tag Manager, various services/technologies can be integrated. If you do not wish individual tracking services to be used and have therefore deactivated them, the deactivation remains in effect for all affected tracking tags integrated via the Google Tag Manager.

YouTube Video Plugin

To integrate third-party content, the YouTube Video Plugin, in the enhanced privacy mode we use, collects data (IP address, time of visit, device and browser information), transfers it to Google and Google subsequently processes it, only if you play a video.

7.2 Use of Meta services

Use of Meta Pixel

We use the Meta Pixel as part of the technologies of Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Facebook (by Meta)” or “Meta Platforms Ireland”) described below. The Meta Pixel automatically collects and stores data (IP address, time of visit, device and browser information and information on your use of our website based on events specified by us, such as visiting a web page or subscribing to the newsletter), from which usage profiles are created using pseudonyms.

In addition, as part of so-called advanced matching, information that can be used to identify individuals (e.g. names, email addresses and telephone numbers) is collected and stored in hashed form for matching purposes.

For this purpose, when you visit our website, the Meta Pixel automatically sets a cookie which, by means of a pseudonymous cookie ID, automatically enables your browser to be recognised when you visit other websites. Meta Platforms Ireland will combine this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to website usage, in particular personalised and group-based advertising. The information automatically collected by the technologies of Meta Platforms Ireland about your use of our website is generally transferred to a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA and stored there. Further information on data processing by Meta Platforms Ireland can be found in the privacy notice of Meta Platforms Ireland. Our service providers are based in and/or use servers in the following countries, for which the European Commission has determined by decision that they ensure an adequate level of data protection: Brazil, USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina. The adequacy decision for the USA serves as the basis for the transfer to a third country, insofar as the respective service provider is certified. Certification is in place. Our service providers are based in and/or use servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Mexico. No adequacy decision of the European Commission exists for these countries. Our cooperation with them is based on these safeguards: standard contractual clauses of the European Commission.

Meta Ads Manager

Via Meta Ads Manager, we advertise this website on Facebook (by Meta) and on other platforms. We determine the parameters of the respective advertising campaign. Meta Platforms Ireland is responsible for the precise implementation, in particular the decision on the placement of ads with individual users. Unless otherwise stated for the individual technologies, the data processing is carried out on the basis of a joint controller agreement pursuant to Art. 26 GDPR. The joint controllership is limited to the collection of the data and its transfer to Meta Platforms Ireland. The subsequent data processing by Meta Platforms Ireland is not covered by this.

On the basis of the statistics on visitor activity on our website generated via Meta Pixel, we run group-based advertising on Facebook (by Meta) via Custom Audiences by determining the characteristics of the respective target group.

In the context of the advanced matching carried out to determine the respective target group (see above), Meta Platforms Ireland acts as our processor.

On the basis of the pseudonymous cookie ID set by the Meta Pixel and the data collected on your usage behaviour on our website, we run personalised advertising via Custom Audiences.

Via Conversions (via Meta Pixel or Conversions API), we measure your subsequent usage behaviour for web analytics and event tracking if you have reached our website via an advertisement from Meta Ads Manager. The data processing is carried out on the basis of a data processing agreement with Meta Platforms Ireland.

7.3 Use of Microsoft Advertising (Bing)

We use the conversion tracking tool “Universal Event Tracking” (UET) from Microsoft Advertising, an offering of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (“Microsoft”). UET collects and stores data (IP address, time of visit, device and browser information and information on your use of our website based on events specified by us, such as visiting a web page or making a purchase), from which usage profiles are created using pseudonyms. Cookies are used for this purpose. We use this information to measure the success of our advertisements in the Bing search engine and the Microsoft advertising network and to show you interest-based advertising (remarketing). Microsoft processes this data as an independent controller. Further information can be found in Microsoft’s privacy statement: privacy.microsoft.com/privacystatement. The information may be transferred to servers of Microsoft Corporation in the USA. Microsoft Corporation is certified under the EU-U.S. Data Privacy Framework; transfers to the USA are therefore covered by the adequacy decision of the European Commission.

7.4 Use of OpenAI Ads (ChatGPT)

We use the Measurement Pixel from OpenAI to measure the success of our advertisements in ChatGPT. The provider is OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland (“OpenAI”). If you reach our website via an advertisement in ChatGPT, a click identifier is stored in a cookie on your terminal device. The pixel transfers data (click identifier, time of visit, device and browser information and information on events specified by us, such as viewing a product, adding to the shopping cart or making a purchase, including the order value) to OpenAI. Where activated, hashed contact data (e.g. email address, telephone number) is additionally transferred for matching purposes. OpenAI and we each process this data as independent controllers. Further information can be found in OpenAI’s privacy notice: openai.com/policies/privacy-policy. The data may be transferred to servers of OpenAI, L.L.C. in the USA. The transfer is based on standard contractual clauses of the European Commission.

7.5 Klaviyo: onsite tracking and sign-up forms

In addition to sending the newsletter (see section 5.2), we also use Klaviyo on our website. Via Klaviyo’s sign-up forms (e.g. pop-ups for newsletter subscription), the data you enter is transferred to Klaviyo. In addition, Klaviyo uses cookies to record your use of our website (e.g. products viewed, shopping cart contents and orders started). If you are subscribed to our newsletter or have identified yourself via a form or a link in our newsletter, this information is assigned to your profile so that we can send you emails tailored to your interests (e.g. reminders of an uncompleted purchase or product recommendations). Klaviyo processes the data on our behalf. Klaviyo, Inc. is certified under the EU-U.S. Data Privacy Framework; transfers to the USA are therefore covered by the adequacy decision of the European Commission.

7.6 Server-side tracking (Stape and Trackbee)

In order to make the measurement of our advertising and analytics services (e.g. Google, Meta and Klaviyo) more reliable, we use server-side tracking. In this process, the data described in the preceding sections is not sent directly from your browser to the respective providers, but first to a server controlled by us on a subdomain of our website and forwarded from there to the providers. This allows us to better control which data is passed on to the providers. Server-side processing only takes place insofar as you have consented to the use of the respective technology (Art. 6(1)(a) GDPR).

To operate this server, we use Stape, an offering of Stape, Inc., 901 N Market St., Suite 100, Wilmington, DE 19801, USA (“Stape”), which acts on our behalf. Stape, Inc. is certified under the EU-U.S. Data Privacy Framework; transfers to the USA are therefore covered by the adequacy decision of the European Commission.

To transfer order and event data from our shop to the advertising and analytics services (e.g. via Meta’s Conversions API), we also use Trackbee, an offering of EC Solutions Software B.V., Boulevard 1945 47, 7511 NG Enschede, The Netherlands (“Trackbee”), which acts on our behalf. Insofar as Trackbee uses sub-processors in countries outside the EU and the EEA, the transfer is based on standard contractual clauses of the European Commission.

Social media

Our online presence on Facebook (by Meta), Instagram (by Meta), YouTube, LinkedIn

Insofar as you have given your consent pursuant to Art. 6(1)(a) GDPR to the respective social media operator, when you visit our online presences on the social media mentioned above, your data is automatically collected and stored for market research and advertising purposes, from which usage profiles are created using pseudonyms. These can be used, for example, to place advertisements within and outside the platforms that presumably correspond to your interests. Cookies are generally used for this purpose. For detailed information on the processing and use of data by the respective social media operator, as well as a contact option and your rights in this regard and setting options for protecting your privacy, please refer to the providers’ privacy notices: Meta (Facebook, Instagram): www.facebook.com/privacy/policy · YouTube (Google): policies.google.com/privacy · LinkedIn: www.linkedin.com/legal/privacy-policy. Should you nevertheless require assistance in this regard, you can contact us.

Facebook (by Meta) is an offering of Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland about your use of our online presence on Facebook (by Meta) is generally transferred to a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA and stored there. The data processing in connection with visiting a Facebook (by Meta) fan page is carried out on the basis of a joint controller agreement pursuant to Art. 26 GDPR. Further information (information on Insights data) can be found at www.facebook.com/legal/terms/information_about_page_insights_data. Our service providers are based in and/or use servers in the following countries, for which the European Commission has determined by decision that they ensure an adequate level of data protection: Brazil, USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina. The adequacy decision for the USA serves as the basis for the transfer to a third country, insofar as the respective service provider is certified. Certification is in place. Our service providers are based in and/or use servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Mexico. No adequacy decision of the European Commission exists for these countries. Our cooperation with them is based on these safeguards: standard contractual clauses of the European Commission.

Instagram (by Meta) is an offering of Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland about your use of our online presence on Instagram is generally transferred to a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA and stored there. The data processing in connection with visiting an Instagram (by Meta) fan page is carried out on the basis of a joint controller agreement pursuant to Art. 26 GDPR. Further information (information on Insights data) can be found at www.facebook.com/legal/terms/information_about_page_insights_data. Our service providers are based in and/or use servers in the following countries, for which the European Commission has determined by decision that they ensure an adequate level of data protection: Brazil, USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina. The adequacy decision for the USA serves as the basis for the transfer to a third country, insofar as the respective service provider is certified. Certification is in place. Our service providers are based in and/or use servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Mexico. No adequacy decision of the European Commission exists for these countries. Our cooperation with them is based on these safeguards: standard contractual clauses of the European Commission.

YouTube is an offering of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google about your use of our online presence on YouTube is generally transferred to a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and stored there. Google LLC is certified under the EU-U.S. Data Privacy Framework; transfers to the USA are therefore covered by the adequacy decision of the European Commission. Insofar as data is transferred to other countries outside the EU and the EEA without an adequacy decision, the transfer is based on standard contractual clauses of the European Commission.

LinkedIn is an offering of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). The information automatically collected by LinkedIn about your use of our online presence on LinkedIn is generally transferred to a server of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA and stored there. Our service providers are based in and/or use servers in the following countries, for which the European Commission has determined by decision that they ensure an adequate level of data protection: USA. The adequacy decision for the USA serves as the basis for the transfer to a third country, insofar as the respective service provider is certified. Certification is in place.

Contact options and your rights

9.1 Your rights

As a data subject, you have the following rights:

pursuant to Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
pursuant to Art. 16 GDPR, the right to request without undue delay the rectification of inaccurate or the completion of your personal data stored by us;
pursuant to Art. 17 GDPR, the right to request the erasure of your personal data stored by us, unless further processing is necessary for exercising the right of freedom of expression and information; for compliance with a legal obligation; for reasons of public interest; or for the establishment, exercise or defence of legal claims;
pursuant to Art. 18 GDPR, the right to request the restriction of the processing of your personal data, insofar as you contest the accuracy of the data; the processing is unlawful but you oppose its erasure; we no longer need the data but you require it for the establishment, exercise or defence of legal claims; or you have objected to the processing pursuant to Art. 21 GDPR;
pursuant to Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller;
pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your habitual residence or place of work or of our registered office for this purpose.

Right to object

Insofar as we process personal data as explained above in order to protect our legitimate interests, which prevail in the context of a balancing of interests, you can object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you only have a right to object if there are grounds relating to your particular situation. After you have exercised your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims. This does not apply if the processing is carried out for direct marketing purposes. In that case, we will no longer process your personal data for this purpose.

9.2 Contact options

If you have any questions about the collection, processing or use of your personal data, or regarding information, rectification, restriction or erasure of data, as well as the withdrawal of consent given or objection to a particular use of data, please contact us directly:

Parvum B.V., Peppelkade 21, 3992 AL Houten, The Netherlands
Email: support@parvum.com
Phone: +31 30 700 9748

9.3 Competent supervisory authority

The supervisory authority competent for us is the Autoriteit Persoonsgegevens, Postbus 93374, 2509 AJ Den Haag, The Netherlands. However, you can also contact the supervisory authority in your country.