privacy statement

Chicas Contentas, registered with the Dutch Chamber of Commerce under number 87364468, VAT number NL864275663B01, established at Wethouder Romboutsstraat 58. We are the controller for the data described in this statement, unless article 5 states otherwise. Questions about privacy, or a request concerning your data: [email protected].

This statement applies to our website chicascontentas.com, to the contact that follows from it and to our services for clients: strategy, positioning, content and direction. Where we work with data of a client's customers on that client's instructions, we are the processor and not the controller. Article 5 describes that situation.

Contact form and e-mail. When you use the contact form on the website, we process your name, your e-mail address, your company name where provided and the content of your message. Purpose: to answer your question. These messages are sent by e-mail to our own inbox; the website does not store them in a database. Introductory calls and appointments. If you schedule an introductory call, we process your name, your e-mail address and the chosen time, so that we can record the appointment, send you a confirmation with the joining link, and reschedule or cancel the appointment. Assignments and projects. For an assignment we process the contact and project data we need in order to work: names and business contact details of the people we work with, agreements, delivered work and correspondence. Administration. For invoices and our bookkeeping we process company, contact and invoicing data. We do not process special categories of personal data and we do not carry out automated decision-making or profiling.

Performance of the agreement: everything needed to carry out an assignment or to let an appointment go ahead. Legitimate interest: responding to your message, maintaining contact about an ongoing or possible cooperation, and the security of our website. Legal obligation: our tax and administrative retention duty. Consent: only where we ask for it explicitly, for example for the use of imagery or a customer story. You can withdraw consent at any time.

Where we manage a client's channels, accounts or campaigns, we come into contact with personal data for which that client is the controller. We process those data only on instruction and in accordance with that instruction, not for our own purposes, and we record this in a data processing agreement. For those data, the client's privacy statement applies.

Our website places no tracking cookies, uses no advertising pixels and does not measure visitor behaviour. There is no analytics software on the page. If you use the contact or appointment screen, technical or functional storage may be required there, for example to remember your language choice or to maintain a session. That storage follows from the function itself and is not used to track you. Our hosting party keeps technical log files, including IP addresses, in order to keep the website available and secure.

We do not share data with third parties in order to sell it or for advertising. Our website and our contact and appointment functionality run on The Inner Signal. The Inner Signal processes those data on our instructions and engages service providers of its own for that purpose, among other things for hosting, the security of website traffic, sending e-mail and video calls. Which parties those are is recorded in the data processing agreement we have with The Inner Signal; on request we will tell you who they are at that time. In addition, our accountant and, where necessary, our legal adviser may receive data. We enter into a data processing agreement with every party that processes personal data on our behalf. Processing takes place within the European Economic Area as far as possible; where that is not the case, it takes place on the basis of the European Commission's standard contractual clauses or another valid safeguard.

Invoices and administration: seven years, on the basis of the tax retention duty. Assignment files: for as long as the cooperation runs and thereafter for as long as necessary for warranty, aftercare and accountability. Contact messages and correspondence: for as long as necessary to handle your question and to conclude the contact. Appointments: for as long as necessary to handle the appointment and its follow-up. We do not keep data longer than is necessary for the purpose for which we received it.

Our website and our screens are only accessible over an encrypted connection. Access to data is limited to the people who need it for their work, and accounts are secured with multi-factor authentication or one-time login codes. Our systems are maintained and kept up to date.

You have the right to access your data, to have it corrected or erased, to have processing restricted, to object to processing based on a legitimate interest, and to receive your data in a commonly used format or have it transferred. If you gave consent, you can withdraw it. Send your request to [email protected]. We respond within one month. To be sure that the request comes from you, we may ask for additional information. If you are not satisfied with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

We amend this statement when our services or the way we process data change. The current version is always available at chicascontentas.com/privacy.

12.1 This Privacy Statement is governed by Dutch law. In the event of any discrepancy between the Dutch version and a translated version, the Dutch text shall prevail for the purposes of interpretation and application. 12.2 This does not affect your rights under the General Data Protection Regulation, including your right to lodge a complaint with the Dutch Data Protection Authority.