Privacy Policy

Data Controller

charlemilg B.V. is the data controller for the personal data we process. We are registered in the Netherlands with registration number 91674835 and our registered address is Lindelaan 105, 1076 AY Amsterdam, North Holland, Netherlands.

Data Collection

The data we collect includes personal information such as your name, email address, phone number, company name, and any project details you provide when contacting us through our website forms or email. We also collect technical information such as your IP address, browser type, device information, and website usage patterns through cookies and similar technologies. When you visit our website, we may automatically collect information about your browsing behavior, pages visited, and time spent on our site to improve our services and user experience.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal bases: legitimate interests for website analytics and business communications, contract performance when providing our services, consent for marketing communications, and legal obligations for compliance with applicable laws and regulations.

How We Use Your Information

We explain how we use your information for various purposes including responding to your enquiries and providing customer support, delivering our software consulting services, improving our website and services, sending you relevant business communications with your consent, complying with legal obligations, and protecting our legitimate business interests. We use of your data is always proportionate and limited to what is necessary for the specific purpose. We do not sell, rent, or share your personal information with third parties for their marketing purposes without your explicit consent.

Data Sharing and Disclosure

We may share your personal data with trusted service providers who assist us in operating our website and delivering our services, such as hosting providers, email service providers, and analytics platforms. These providers are contractually obligated to protect your data and use it only for the purposes we specify. We may also disclose your information when required by law, to protect our rights, or in connection with a business transfer or acquisition.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Contact enquiries are typically retained for 3 years, client project data for 7 years after project completion, website analytics data for 2 years, and marketing consent records until you withdraw consent. We regularly review our data retention practices and securely delete data that is no longer needed.

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data in certain circumstances
• Right to restrict processing: Request limitation of how we process your data
• Right to data portability: Request transfer of your data to another service provider
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent for processing where applicable

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website performance. We use essential cookies for website functionality, analytical cookies to understand how visitors use our site, and preference cookies to remember your settings. You can control cookie settings through your browser preferences. For detailed information about our cookie practices, please refer to our Cookie Policy.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption of data in transit and at rest, regular security assessments, access controls, and staff training on data protection principles. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

International Data Transfers

As charlemilg operates primarily within the European Union, your personal data is generally processed within the EU/EEA. If we need to transfer your data outside the EU/EEA, we ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or other approved transfer mechanisms under GDPR.

Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website with a new "last updated" date. We encourage you to review this policy periodically to stay informed about how we protect your privacy.

Contact Information

If you have any questions about this privacy policy, want to exercise your rights, or need to contact us regarding data protection matters, please contact us using the following information:

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe your personal data has been processed unlawfully. In the Netherlands, the supervisory authority is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority). You can contact them at autoriteitpersoonsgegevens.nl or by phone at +31 70 888 8500.