Privacy Policy

Data Controller Information

graviproluxum B.V. ("we", "us", or "our") is the data controller responsible for your personal data. We are registered in the Netherlands with registration number KvK25361497 and our registered address is Prinsengracht 83, 3047 QY Rotterdam, South Holland, Netherlands.

Data We Collect

We collect and process various types of personal data when you interact with our services. The data we collect includes information you provide directly to us, information we collect automatically when you use our website, and information we may receive from third parties. This data collection helps us provide and improve our education marketing analytics services.

Information You Provide to Us

• Contact information (name, email address, phone number, postal address)
• Professional information (job title, institution name, role)
• Communication preferences and marketing consent
• Messages and enquiries sent through our contact forms
• Information provided during consultations and service delivery

Information We Collect Automatically

• Website usage data (pages visited, time spent, click patterns)
• Technical information (IP address, browser type, device information)
• Cookies and similar tracking technologies (see our Cookie Policy for details)
• Analytics data to improve our website and services

How We Use Your Information

We use your personal data for various purposes related to providing our education marketing analytics services. How we use your information depends on how you interact with us and the legal basis for processing. We are committed to using your data only for legitimate business purposes and in accordance with applicable data protection laws.

Service Provision

• Responding to your enquiries and providing requested information
• Delivering our education marketing analytics and consulting services
• Managing client relationships and project delivery
• Processing payments and maintaining financial records

Communication and Marketing

• Sending service-related communications and updates
• Providing marketing communications about our services (with your consent)
• Conducting customer satisfaction surveys and feedback collection
• Notifying you about changes to our services or policies

Website Improvement and Analytics

• Analysing website usage to improve user experience
• Conducting A/B testing and website optimisation
• Monitoring website performance and security
• Generating insights about our audience and service effectiveness

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, their purposes, and how to manage them, please refer to our comprehensive Cookie Policy.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to perform our services or respond to your requests
• Legitimate Interests: Processing for our legitimate business interests, such as improving our services and website functionality
• Consent: Processing based on your explicit consent, particularly for marketing communications and non-essential cookies
• Legal Obligation: Processing required to comply with legal or regulatory requirements

Data Sharing and Third Parties

We may share your personal data with carefully selected third parties who help us deliver our services. We ensure that all third parties maintain appropriate data protection standards and use your data only for specified purposes.

Service Providers

• Cloud hosting and storage providers
• Email marketing and communication platforms
• Analytics and website performance services
• Payment processing services
• Professional advisors (legal, accounting, consulting)

Legal Requirements

We may disclose your information if required by law, regulation, or legal process, or to protect our rights, property, or the safety of our users or the public.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable laws. Our data retention periods vary depending on the type of information and the purpose for processing.

• Contact and enquiry data: Retained for up to 3 years after last contact
• Client project data: Retained for up to 7 years for legal and contractual purposes
• Marketing data: Retained until you withdraw consent or up to 2 years of inactivity
• Website analytics data: Typically retained for up to 26 months
• Financial records: Retained for up to 7 years as required by law

Your Rights

Under GDPR and applicable data protection laws, you have several rights regarding your personal data. You can exercise these rights by contacting us using the details provided below. We will respond to your requests within one month, though this may be extended in complex cases.

Individual Rights Include:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Request transfer of your data to another organisation
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include encryption, access controls, regular security assessments, and staff training on data protection.

International Data Transfers

We primarily process data within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or other approved transfer mechanisms.

Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child under 16, please contact us immediately.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website and updating the "last updated" date.

Contact Us

If you have any questions about this privacy policy, wish to exercise your data protection rights, or need to contact us about your personal data, please reach out using the following contact information:

Supervisory Authority

If you are not satisfied with how we handle your personal data or our response to your requests, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.