1.     General
Starsweets reserves the right to change the terms of this privacy statement. If we make changes to the privacy statement, we will notify you. We encourage you to periodically read the latest version of the privacy statement.

2.        What personal data do we collect?
Personal data may be collected in a number of ways when you use the Service. The following is a summary of the personal data we collect. The personal data is categorized according to the purpose of processing. Next to each personal data is an indication of how long that personal data is processed.
Personal data collected directly by us or provided to us directly by you

3.1 Processing on a legal basis (administrative obligations), processing duration 10 years
– name
– address

Failure to provide or object to the above personal data may affect your use of the Service. We may block or restrict your access to the Service and we reserve the right to terminate the agreement or right of use in accordance with our terms and conditions. The personal data mentioned in this section are required to comply with our legal obligations.

3.2 Processing necessary for the performance of a contract (the provision of the Service), processing period up to 2 years after the termination of the contract

3.2.1.      General
– name
– private and/or business email address
– password
– phone number
– employer
– work-related function
– gender
– date of birth
– other personal data you provide when contacting Starsweets.

Failure to provide or object to the above personal data may affect your use of the Service. You may be prevented from using the Service, the Service may not function properly. We may block or restrict your access to the Service and we reserve the right to terminate the agreement or right of use in accordance with our terms and conditions. The personal data listed in this section is required for the Service to function or operate properly.

3.3 Processing for the protection of the legitimate interests of Starsweets processing duration up to 2 years after the termination of the agreement

3.3.1.      Improving our services.

3.3.2.      Keeping the Service secure.
– IP address
– device-ID
– user-ID
– operating system
– time, date and place of login

3.3.3.      To inform you about other services provided by Starsweets
– email address (if you enter it in the appropriate field).

Failure to provide or object to the above personal data may affect your use of the Service. We may block or restrict your access to the Service, and we reserve the right to terminate the agreement or right of use in accordance with our terms and conditions (this does not apply to the personal data mentioned under 3.3.3.). The personal data mentioned in this section is required to satisfy the legitimate interests of Starsweets and to prevent misuse of the Service and security incidents.

3.4 Processing with your consent, processing duration up to 2 years after the termination of the contract

3.4.1 To inform you (at your request) about the service you followed or other services of Starsweets
– name
– organization
– email address

3.4.2 To inform you at your request and answer your questions
– name
– organization
– email address
– other personal data you enter when contacting Starsweets

3.4.3.      Voluntarily submitted information on our websites .
Not providing or objecting to the above personal data will not affect your use of the Service. Refusing or withdrawing consent does not negatively affect your use of the Service.
The above personal data are processed as soon as you use the Service. Personal data that are processed only with your consent are processed as soon as you have given your consent or provided the personal data. Sharing of Personal Data. Unless otherwise stated in this privacy statement, we do not describe, sell or trade personal information about our visitors and users to third parties.

4.1 Sharing with processors.
Starsweets may engage third parties to assist us in providing the Service. Those third parties may, as part of their role in providing the Service, process your personal data. In this regard, such third parties are referred to hereinafter as “Processors. We enter into processor agreements with these Processors. 
We use the following types of Processors:
– developers and suppliers of software;
– storage of (personal) data and database management and maintenance;
– research agencies and analytical software to improve our services (e.g. privacy-friendly Google Analytics so no personal data is shared with Google);
– ticket administrators for customer support;
– administrators of evaluation forms;
– hosting provider(s);
– relationship management software providers.

In some cases, the Processor may collect your personal data on our behalf. We inform Processors that they may not use personal data they obtain from us except for the purpose of providing the Service. Starsweets is not responsible for any additional information you provide directly to Processors. We recommend that you inform yourself thoroughly about the Processor and its business before providing personal data to such Processors.

4.2 Sharing with your consent.
From time to time, we may also share personal data with third parties when you give us permission to do so. For example, we may work with other parties to provide specific services or offers directly to you. If you sign up for these third-party services or marketing offers, we may share the personal data you provide for that purpose, such as name or other contact information we reasonably deem necessary, with these third parties so that our business partner can provide the services or offers or contact you.

4.3 Our Legal Responsibility
We may share personal data if we are confident that it is permitted by law or if we are required to do so by law. We may also share personal data with third parties if reasonably necessary or appropriate to comply with legal obligations, if necessary to comply with legal requests from authorities, to respond to any claims, or to protect the rights, property or safety of us, our users, our employees or the public and, without limitation, to protect ourselves or our users from fraudulent, abusive, inappropriate or unlawful use of the Service. We will promptly notify you of any requests we receive from an executive, administrative or other governmental agency that relate to your personal information, unless prohibited by applicable law.

4.4 Merger or sale (part) of the business
Personal data may also be disclosed, shared and transferred as part of, or during negotiations for, a merger, sale of assets of the company, financing or purchases or in any other situation where personal data may be transferred as part of our business.

Protection of Personal Data
Starsweets will ensure that appropriate technical and organizational security measures are taken for the processing of personal data. We follow generally accepted standards to protect personal data, both during its transfer and once we have received the personal data. We have taken at least the following measures:

We have implemented physical and electronic measures designed to prevent unauthorized access, loss or misuse of personal data as far as possible.

We use Secure Socket Layer (SSL) technology where appropriate to encrypt transmission of sensitive information or personal data to us, such as account passwords and other payment-related identifiable information.
Backups of personal data are made whenever reasonably possible.

Sensitive information is stored encrypted whenever possible.
Software vulnerabilities are addressed as soon as reasonably possible.

You should note that our Processors are responsible for processing, managing or storing all or part of the personal data we receive. Processors are not authorized to use this data to advertise to you. These Processors are contractually obligated, through a processor agreement, with us to secure the personal data they have received from us.

However, there is no method of transmission over the Internet or method of electronic storage that is 100% secure. Therefore, we cannot guarantee absolute security.

Links to Third Party Sites.
Our Services and/or the Website may contain links to other websites, as well as third-party advertisements. Third-party websites may track information about you. We have no control over such sites or their activities. Any personal information you provide on third-party pages is provided directly to that third party and is subject to that third party’s privacy policy. We are not responsible for the content, privacy and security practices and policies of websites to which we link or which advertise on our Services and/or websites. Links from our website to third parties or to other sites are provided solely for your benefit. We encourage you to review their privacy and security practices and policies before providing personal information to them.

What choices do you have regarding the use of its personal data?
Before we share your personal data with third parties in ways not covered by this privacy statement, including use for direct marketing purposes, you will be notified and asked to consent at the time such information is collected.

We may send you marketing and promotional materials about our products and services. If you do not or no longer want the information to be used for direct marketing, you may contact us at the e-mail address listed under “Contact Us.

You may also unsubscribe yourself by following the unsubscribe instructions included with each promotional e-mail. This does not affect our right and ability to send you Service- and account-related emails or use personal data as described in this Privacy Statement.

We will comply with your requests as soon as possible after receiving the request.

Your rights
You may review, update, correct or delete your relevant personal data collected by the Website and the Service, by contacting us in a manner mentioned under Article 9 “Contact” or by using a function designed for this purpose in the Service.

Please note that deleting personal data or restricting processing or withdrawing consent may under circumstances result in the termination of the right to use the Service.

We reserve the right to retain your personal data in our files if we believe it is necessary or advisable to do so in order to provide the Service to others, resolve disputes, enforce applicable terms of use, for technical and/or legal requirements and/or if the Service requires it.

To access your own personal data by email, you must provide sufficient proof of your identity as we request. We reserve the right to deny access to any user if we believe there are questions about your identity. We respond to all access requests within 4 weeks. For complex requests, the deadline may be extended for an additional 4 weeks. If we extend the deadline, we will notify you within 4 weeks of making the request.

You can request us to restrict or stop the processing of your personal data in the future. We will comply with your request, but you may be impeded in your use of the Service and you may not be able or allowed to use the Service as stated in Section 4 of this Privacy Notice.

You may request us at reasonable intervals to transfer the personal information that we process about you, as specified by you, as long as the requested information does not contain personal data of other natural persons and as long as the requested information has been processed based on the grounds stated in Articles 3.2 and 3.4 of this Privacy Statement. We will fulfill your request within 4 weeks of receiving the request.

You have the right to file a complaint with the competent privacy authority related to our processing of personal data. For the Netherlands, this authority is the Authority Persoonsgegevens, which you can reach at https://autoriteitpersoonsgegevens.nl/.

Contact

If you have any questions, concerns or comments about this privacy statement, please contact us at:
E-mail:                    info@starsweets.nl
By phone: 076 596 46 49
By post: Starsweets Holding B.V.
Stadionstraat 13B2
4815NC Breda