Privacy Policy

Introduction

This Privacy Policy explains how simplyways B.V. ("simplyways", "we", "us", or "our") collects, uses, and protects your personal information when you visit our website simplyways.pro or use our risk advisory services. We are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Controller

simplyways B.V. is the data controller for the personal data we process. Our contact details are:

Data Collection

The data we collect includes personal information that you provide directly to us and information we collect automatically when you use our website and services. This includes:

• Contact information (name, email address, phone number, company details)
• Communication data (messages, enquiries, feedback)
• Website usage data (IP address, browser type, pages visited, time spent)
• Cookie data (preferences, session information, analytics data)
• Professional information (job title, industry, business needs)
• Service-related data (project requirements, risk assessment information)

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal bases:

• Consent: When you provide explicit consent for marketing communications or cookie usage
• Contract: To perform our risk advisory services and fulfil contractual obligations
• Legitimate interests: To improve our services, conduct business development, and maintain security
• Legal obligation: To comply with applicable laws and regulations

How We Use Your Information

We explain how we use your information for various business purposes, including providing our risk advisory services, communicating with you, and improving our offerings. The use of your data includes:

• Providing and delivering our risk advisory services
• Responding to your enquiries and providing customer support
• Processing and managing service agreements and contracts
• Sending relevant business communications and updates
• Improving our website functionality and user experience
• Conducting analytics to understand service usage and preferences
• Ensuring security and preventing fraud or misuse
• Complying with legal and regulatory requirements

Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your information in the following circumstances:

• With trusted service providers who assist in delivering our services (under strict data processing agreements)
• With professional advisors (lawyers, accountants, auditors) when necessary for business purposes
• When required by law or to respond to legal processes
• To protect the rights, property, or safety of simplyways, our clients, or others
• In connection with a business transaction (merger, acquisition, or sale of assets)

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations. Our retention periods are:

• Contact enquiries: 3 years from last contact
• Client service data: 7 years after service completion (for legal and professional requirements)
• Website analytics: 26 months maximum
• Marketing communications: Until you unsubscribe or withdraw consent
• Legal compliance data: As required by applicable laws and regulations

Your Rights

Under GDPR and other data protection laws, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data in certain circumstances
• Right to restrict processing: Request limitation of how we process your data
• Right to data portability: Request transfer of your data to another service provider
• Right to object: Object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: Withdraw consent for processing at any time

To exercise any of these rights, please contact us at privacy@simplyways.pro or +31 704036405. We will respond to your request within one month.

International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

• European Commission adequacy decisions
• Standard contractual clauses approved by the European Commission
• Binding corporate rules or certification schemes
• Other lawful transfer mechanisms under GDPR

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Staff training on data protection and security
• Incident response and breach notification procedures

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyse website usage. For detailed information about our use of cookies, please refer to our Cookie Policy.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. For significant changes, we may provide additional notice through email or other communication channels.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us using the following contact information:

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates data protection laws. In the Netherlands, the relevant authority is: