Privacy Policy
At &ranj, we are committed to safeguarding your privacy and ensuring that your personal data is protected. This privacy policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR).
1. Who We Are
&ranj b.v. ("we", "us", "our") is the data controller responsible for your personal data. Our registered office is at Lloydstraat 21M, 3024 AL Rotterdam, The Netherlands. We have appointed a Data Protection Officer (DPO), who can be contacted at info@ranj.nl.
2. What Data We Collect and Why
We collect the following types of personal data when you use our website:
Personal Identifiers
- Name, email address, (for inquiries, forms, or newsletters).
- IP address and device information (to optimize site performance and security).
Usage Data
- Information about your interactions with our site (page views, time spent, etc.).
- Data collected via cookies (see our Cookie Policy).
Children’s Data
Our website and services are not intended for children under the age of 16. We do not knowingly collect personal data from children. If we process personal data from children under 16, we will obtain explicit consent from a parent or guardian before collection. If we discover that we have inadvertently collected personal data from a child without parental consent, we will delete it as soon as possible. If you believe that we might have collected data from a child, please contact us immediately at info@ranj.nl.
Why We Collect Data:
- To respond to inquiries or requests.
- To fulfill contracts or orders.
- To send marketing communications (with your consent).
- To improve our website and services.
3. Legal Bases for Processing
We process personal data based on one or more of the following legal bases:
- Consent: You have given clear consent for us to process your personal data.
- Contract: Processing is necessary for a contract with you or to take steps at your request before entering into a contract.
- Legal Obligation: We must process your data to comply with the law.
- Legitimate Interest: Processing is necessary for our legitimate interests (e.g., improving services), and your interests do not override this. Where we rely on legitimate interest, we conduct a balancing test to ensure that your rights and interests do not override our legitimate interests. You have the right to object to this processing at any time by contacting us.
4. HubSpot as Data Processor
Our website is hosted and managed by HubSpot, which processes data on our behalf. HubSpot acts as a data processor, while &ranj remains the data controller. HubSpot implements robust security measures and complies with GDPR. Their privacy policy can be found here.
5. Consent for Forms and Direct Marketing
When submitting personal data through forms on our website (e.g., contact forms or newsletter sign-ups), you will be required to explicitly opt-in by ticking a consent checkbox. This ensures we have your clear permission to process your data for the specified purposes, such as responding to your inquiry or sending marketing communications. The checkbox will not be pre-ticked, and you must actively consent to receive communications from us.
You may withdraw this consent at any time by contacting us or clicking the "unsubscribe" link in emails.
6. Your Rights (GDPR)
Under GDPR, you have the following rights regarding your personal data:
- Right to Access: Request copies of your personal data.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure (Right to be Forgotten): Request deletion of your personal data.
- Right to Restriction: Request that we limit processing of your data.
- Right to Data Portability: Request transfer of your data to another service.
- Right to Object: Object to processing based on legitimate interest or direct marketing.
- Right to Withdraw Consent: At any time, you can withdraw consent for marketing or cookies.
To exercise your rights, contact us at info@ranj.nl. We will respond within one month.
7. Data Transfers Outside the EEA
If your data is transferred outside the EEA, we ensure safeguards are in place, such as:
- Standard Contractual Clauses (SCCs) approved by the European Commission.
- Transfers to countries with adequacy decisions.
8. Data Retention
We retain personal data for up to 12 months unless a longer retention period is required by law or necessary for legitimate business purposes. Customer data related to contracts or purchases will be retained for the duration of the agreement and an additional period as required by law (typically 5-7 years). If you withdraw consent, data will be deleted within 30 days from your request.
9. Cookies and Tracking Technologies
Our website uses cookies managed by HubSpot. When you visit our site, a cookie banner will appear requesting your consent to non-essential cookies. Essential cookies ensure the site functions correctly and cannot be disabled. Non-essential cookies will only be set after obtaining your explicit consent. Our cookie banner allows you to select and consent to individual categories of non-essential cookies (e.g., marketing, analytics) before they are activated.
Managing Cookies:
- You can update preferences at any time by clicking on the cookie settings link available on all pages.
- To withdraw consent for non-essential cookies, clear your browser's cookies and adjust preferences upon revisiting the site.
- For more information, visit www.allaboutcookies.org.
10. Data Breaches
In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay.
11. Changes to This Policy
We may update this privacy policy from time to time. Significant changes will be communicated via email or website notification.
12. Contact Us
For any questions or concerns regarding your privacy, contact our DPO at:
Email: info@ranj.nl
