Privacy Policy

1. Data Controller

The data controller for your personal information is:

2. Information We Collect

We collect information in the following ways:

2.1 Information You Provide

• Contact information (name, email address, phone number) when you contact us
• Feedback and communication when you interact with our customer service
• Any other information you choose to provide

2.2 Information Automatically Collected

• Website usage data (pages visited, time spent, clicks)
• Device information (browser type, operating system, IP address)
• Cookies and similar tracking technologies (see our Cookie Policy)

3. How We Use Your Information

We use your personal information for the following purposes:

• Communication: To respond to your inquiries and provide customer support
• Service Improvement: To understand how our website is used and improve our services
• Legal Compliance: To comply with applicable laws and regulations
• Business Operations: To operate and maintain our website and business

4. Legal Basis for Processing

Under GDPR, we process your personal information based on:

• Consent: When you provide consent for specific processing activities
• Legitimate Interest: For website analytics and business improvement
• Contractual Necessity: To fulfill our obligations in providing services
• Legal Obligation: To comply with applicable laws

5. Information Sharing

We do not sell your personal information. We may share information with:

• Service Providers: Third parties who help us operate our website and business
• Legal Requirements: When required by law or to protect our rights
• Business Transfer: In connection with a merger, acquisition, or sale of assets

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, typically:

• Contact information: Until you request deletion or 3 years of inactivity
• Website analytics: Up to 26 months
• Legal compliance: As required by applicable law

7. Your Rights Under GDPR

As a data subject in the EU, you have the following rights:

• Access: Request a copy of your personal information
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your personal information
• Restriction: Limit how we process your information
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interest
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at privacy@citoleidmz.top.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

9. International Data Transfers

Your personal information may be transferred to and processed in countries outside the European Economic Area. When we do so, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.

10. Cookies

Our website uses cookies and similar technologies. For detailed information about our use of cookies, please see our Cookie Policy.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

12. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last updated" date.

14. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe we have processed your personal information unlawfully. In the Netherlands, the supervisory authority is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).

15. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: