LEGAL

Privacy policy

Last updated: [PLACEHOLDER: date of publication]

This is an English translation of our Dutch privacy statement. In the event of any discrepancy, the Dutch version prevails.

Banana Online Marketing handles your personal data with care. In this privacy policy you can read which data we collect, why we do so and what rights you have. We comply with the General Data Protection Regulation (GDPR).

1. Who are we?

Banana Online Marketing is responsible for processing personal data as described in this policy.

Company name: Banana Online Marketing (sole proprietorship)
Owner: Marten van der Haar
Address: Schokkerweg 3, [PLACEHOLDER: postcode] The Hague, the Netherlands
Chamber of Commerce (KvK) number: 60401362
VAT number: [PLACEHOLDER: VAT identification number]
Email: [email protected]

For questions about privacy, please contact [email protected].

2. Which personal data do we process?

We only process data that you provide to us yourself or that is created when you visit our website.

Via the contact form or quote request: name, company name, email address, phone number, the service you are interested in and the content of your message.

If you sign up for practical tips by email: name and email address.

If you are a client: contact and billing details, and data needed to carry out the assignment, such as access to advertising and analytics accounts.

When you visit our website: IP address (anonymised where possible), details about your browser and device, and which pages you visit and for how long. We use cookies for this. You can read more in our cookie policy.

We deliberately do not process special categories of personal data or data of persons under the age of 16.

3. Why do we process your data?

Answering your question or quote request – based on your request to enter into an agreement (Art. 6(1)(b) GDPR).
Carrying out and invoicing an assignment – performance of the agreement (Art. 6(1)(b) GDPR).
Complying with the tax retention obligation – legal obligation (Art. 6(1)(c) GDPR).
Sending practical tips by email – your consent (Art. 6(1)(a) GDPR).
Analysing and improving our website – legitimate interest, or consent where cookies require it (Art. 6(1)(f) / (a) GDPR).
Showing ads to previous visitors – your consent via the cookie banner (Art. 6(1)(a) GDPR).

You can withdraw your consent at any time. Every email with tips contains an unsubscribe link.

4. How long do we keep your data?

Contact and quote requests that do not lead to an assignment: up to 12 months after the last contact.
Client and billing data: 7 years, due to the tax retention obligation.
Sign-up for email tips: until you unsubscribe.
Analytics data: a maximum of 14 months.

5. Who do we share your data with?

We never sell your data. We only share it with parties that help us deliver our services. Where necessary, we conclude a data processing agreement with these parties.

Plug&Pay: website hosting and form processing
Google (Analytics, Ads, Workspace): website analytics, advertising and email [PLACEHOLDER: check which Google services you use]
[PLACEHOLDER: email marketing tool]: sending email tips
[PLACEHOLDER: accounting software]: invoicing and administration
Freelancers working on your assignment: only where necessary, under confidentiality

Some of these parties are based outside the European Economic Area, such as Google in the United States. In that case we ensure appropriate safeguards, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

We provide data to authorities if we are legally required to do so.

6. Data of our clients and their customers

For clients we manage, among other things, advertising and analytics accounts. These may contain personal data of their customers or website visitors. In that case we are the processor and our client is the controller. We record the arrangements for this in a data processing agreement.

7. Security

We take appropriate technical and organisational measures to protect your data against loss and unauthorised use. Think of a secure connection (SSL), two-factor authentication on our accounts and access to data only for those who really need it.

8. Your rights

You have the right to access your data, have incorrect data corrected, have your data deleted, restrict processing, object to processing, receive your data in a common file format (data portability) and withdraw consent you have given.

Send your request to [email protected]. We respond within one month. To prevent misuse, we may ask you to identify yourself.

9. Filing a complaint

Not satisfied with how we handle your data? Let us know first, and we will look for a solution together. You also always have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl.