Legal name: P23Geluid
Postal address: Order 20, Unit A3467, 241DC, The Hague, The Netherlands
Email address: p23geluid@gmail.com

What type of information do we collect?

We collect personal information you voluntarily provide to us when you interact with our website, particularly when you fill out forms. This information may include:

• Contact information: Your full name, postal address, phone number, and email address.

• Payment information: While we do not directly collect or store your bank details, payment transactions are processed securely through Mollie. For these transactions, you will be directed to Mollie's platform where you will provide your banking information. We receive confirmation of your payment but do not have access to your sensitive financial data.

We are committed to protecting your data. We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk of processing your personal data, including measures to prevent unauthorized access, disclosure, alteration, or destruction of data. This includes, but is not limited to, encryption, access controls, and secure server environments. Here’s how we handle its storage, sharing, and disclosure:

• Storage: The personal data you submit via our forms is either sent directly to our secure email address or processed through Make scenarios. Make acts as a data processor, facilitating the flow of information between our website, our email, and Mollie.

• Email Communication: Information sent directly to our email is stored within our secure email system.

• Make Scenarios: Data processed via Make is handled in accordance with Make's privacy policy and security measures. We have configured these scenarios to ensure your data is handled efficiently and securely.

• Payment Processing (Mollie): All payment transactions are handled exclusively by Mollie. We do not store your bank details on our servers. Mollie processes your payment information in accordance with their own strict privacy and security policies. We only receive confirmation of payment from Mollie, not your sensitive financial data.

• No Unnecessary Sharing: We do not sell, rent, or trade your personal information with third parties for marketing purposes.

• Legal Compliance: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

For example:

• Contact and inquiry data submitted via forms will generally be retained for [e.g., a reasonable period to address your request and follow up, such as 12 months] unless a longer retention period is required by law or for ongoing contractual relationships.

• Data related to payments and orders processed via Mollie will be retained for the period required by tax, accounting, and consumer protection laws (e.g., 5 to 10 years in many EU countries).

Once the retention period expires, your personal data will be securely deleted or anonymized.

Under the GDPR, you have the following rights regarding your personal data:

• The right to access: You have the right to request copies of your personal data that we hold.

• The right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

• The right to erasure (the "Right to be forgotten"): You have the right to request that we erase your personal data, under certain conditions.

• The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.

• The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions.

• The right to data portability: You have the right to request that we transfer the data that we have collected to another organisation, or directly to you, under certain conditions.

• The right to withdraw consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us at p23geluid@gmail.com. We will respond to your request within one month.

You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or where an alleged infringement of the GDPR occurred.

If you have any questions about this Privacy Policy or our data practices, please contact us at p23geluid@gmail.com.