Privacy Statement

Entweder Oder BV, trading as Skepp, located in the Netherlands, provides services to its website visitors, (former) customers, and other (natural) individuals who have reached out to them. Skepp designs, builds, and runs offices that make great workspaces. Within the scope of these services ("Services"), Skepp processes personal data.

Skepp considers the protection of the processed personal data of utmost importance. When processing personal data in the Netherlands, Skepp is bound by the General Data Protection Regulation (GDPR) as of May 25, 2018. This privacy policy explains how Skepp protects your privacy and handles your personal data.

Do you have questions about this privacy policy? You can find information on how to contact Skepp regarding these matters in this privacy policy.

Who processes your personal data?

This privacy policy pertains to the processing of personal data by Skepp as the data controller. This company is located at Brugstraat 11, Almelo, Netherlands, postcode (7607 XJ). Skepp can be reached by email at [email protected].

Use of personal data

When you use the Skepp website or the Services it offers, you may share personal data with Skepp. Skepp collects and uses personal data that you directly share with them. Skepp will not use the personal data for purposes other than those described in this statement unless you have given prior consent.

What personal data is processed?

Personal data refers to information that relates to you or can be associated with you. Any actions involving your personal data, such as collecting, storing, using, transmitting, or deleting your data, are referred to as "processing" personal data. Skepp processes personal data that you have provided to them, for example, by sending an email. When you use Skepp's Services, they may collect the following data:

• Personal identification information, such as your first and last name;
• Contact information, including your address, postal code, city, phone number, and email address;
• Payment information, such as VAT number or bank account number;
• Other information you voluntarily share with Skepp, such as social media accounts, IP addresses, browser settings, feedback, and opinions;
• Other information necessary for Skepp's service provision.

These may also include personal data obtained from other sources, such as data from the Chamber of Commerce Business Register, the Land Registry, and personal data available on public (business) websites. Skepp may also receive personal data from clients about you.

Purposes and legal basis for processing your personal data

Your personal data is generally processed for the following purposes:

• Communication with you, for example through support channels;
• Creating and sending invoices;
• Spam prevention;
• Sending newsletters via email;
• Analyzing statistics and optimizing services.

Your personal data is only processed when necessary for the execution of the contract you have entered into with Skepp or based on your consent, which you can withdraw at any time. Additionally, Skepp may process your personal data when they have a legitimate interest that does not unduly infringe on your privacy.

How your personal data is handled

Skepp ensures that your personal data is protected against loss, unlawful processing, or misuse. They have implemented various technical and organizational measures, including:

• Logical access control, such as the use of passwords;
• Securing computer systems with firewalls, antivirus programs, and DDoS prevention;
• Minimization and updating of personal data;
• Using the shortest possible retention periods;
• Encrypting and pseudonymizing data when necessary;
• Implementing purpose-bound access restrictions;
• Monitoring authorized authorizations.

How long your personal data is retained

Skepp ensures that all your data is carefully stored and protected. They do not retain your data longer than necessary for the purpose for which the data was processed. For example, your personal data is stored for as long as you use the Services. Skepp adheres to legal retention periods. For example, personal data of website visitors is retained for 12 (twelve) months.

Sharing your personal data with third parties

Your personal data is not shared with third parties without your consent. However, there might be instances where sharing your personal data with third parties is necessary. For example, sharing data with judicial authorities or a counterparty might be required. Additionally, sharing personal data might be necessary to enter into an agreement or a notarial deed. Data may also be shared with subcontractors engaged by Skepp, such as a hosting provider. Furthermore, legal obligations may require Skepp to disclose your personal data to third parties. If a court ruling obliges Skepp to provide personal data to third parties, they must comply. Your personal data is not shared with third parties for commercial purposes.

Third-party websites and services

Skepp's approach is designed to minimize the sharing of information with third parties. Information is shared only when necessary to carry out its services and only with parties that can guarantee an appropriate level of protection and security.

Through Skepp's website, users may link to other third-party websites that provide useful information. This privacy policy only pertains to personal data processed by Skepp in the context of its Services. This privacy policy does not apply to third-party websites or applications. Skepp cannot guarantee that these third parties handle your personal data in a safe and reliable manner. Always read the privacy statements of these third parties.

Transfer of personal data

Skepp processes your personal data in accordance with the General Data Protection Regulation (GDPR). Where Skepp or one of its subcontractors processes personal data outside the European Economic Area (EEA), Skepp takes appropriate measures to ensure that personal data is adequately secured and that the receiving party offers an appropriate level of security, for example because the provider participates in the EU-US Data Privacy Framework (DPF) or relies on the European Commission's Standard Contractual Clauses.

Automated decision-making

Skepp does not make decisions with significant consequences for individuals based on automated processing. This refers to decisions made by computer programs or systems, without human intervention (such as an employee of Skepp).

Cookies and similar techniques used by Skepp

Skepp uses functional, analytical, and tracking cookies. A cookie is a small text file that is stored in the browser of your computer, tablet, or smartphone when you first visit this website. Skepp uses cookies for purely technical functionality. These cookies ensure the proper functioning of the website and remember your preferences, such as settings. These cookies are also used to make the website work well and optimize it. Additionally, Skepp places cookies that track your browsing behavior, allowing them to offer tailored content and advertisements. You were already informed about these cookies and asked for your consent when you first visited the Skepp website. You can opt out of cookies by configuring your internet browser not to store cookies. You can also delete all information previously stored through your browser settings. For an explanation, visit: veiliginternetten.nl.

Third parties, such as advertisers and social media companies, also place cookies on this website. This includes Google Analytics, Facebook, and AdWords.

Viewing or modifying your personal data

Do you want to know what personal data Skepp has recorded about you? You can request an overview of the personal data processed or being processed about you from Skepp. If you believe that your personal data has been processed inaccurately or incompletely or if you feel that certain personal data does not need to be processed, you can submit a request for modification, addition, or deletion to Skepp. You also have the right to object to the processing of your personal data and the right to data portability. Furthermore, you have the right to withdraw any consent granted for the processing of your personal data, such as receiving newsletters.

To ensure that the request for access is made by you, Skepp requests a copy of your identity document to be sent with the request. Please black out your photo, MRZ (machine-readable zone, the strip with numbers at the bottom of the passport), passport number, and Citizen Service Number (BSN) for privacy protection. If you send such a request to Skepp, they will provide information about the actions taken as soon as possible, but no later than 4 (four) weeks after receiving your request.

For questions or complaints about the processing of personal data by Skepp, you can send your written requests to:

Supervisory authority complaints

The Dutch Data Protection Authority (Autoriteit Persoonsgegevens) ensures that companies comply with the General Data Protection Regulation. If you believe that Skepp is not adhering to the applicable privacy laws, you can contact them. Skepp is happy to help you find a solution. Additionally, you always have the right to file a complaint with the Dutch Data Protection Authority.

About this privacy policy

Privacy laws and regulations are subject to change. Therefore, Skepp's privacy policy is never entirely final, but they strive to keep it up to date. This privacy policy may be amended from time to time. If these changes are relevant to you, you will be informed or the changes will be prominently communicated to you. The most current version of this privacy policy can always be found on our website.