Privacy Policy

Introduction

BoldNebula B.V. ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website boldnebula.top or use our services. We are the data controller for the purposes of the General Data Protection Regulation (GDPR).

Data Controller Information

The data controller responsible for your personal data is BoldNebula B.V., a company registered in the Netherlands with registration number NL17482936. Our registered office is located at Schoolstraat 196, 1371 MV Almere, Netherlands. For any privacy-related enquiries, please contact us at privacy@boldnebula.top or by phone at +31 368510612.

Data We Collect

The data collection practices on our website are designed to provide you with the best possible service whilst respecting your privacy. We collect information that you provide directly to us, as well as information that is automatically gathered when you use our website.

Personal Information You Provide: When you contact us through our contact form, subscribe to our newsletter, or request our services, we may collect personal information such as your name, email address, phone number, company name, and any other information you choose to provide in your messages or enquiries.

Automatically Collected Information: When you visit our website, we automatically collect certain information about your device and usage patterns, including your IP address, browser type, operating system, referring URLs, pages viewed, and the dates and times of your visits.

How We Use Your Information

We use of your data is based on legitimate business interests and, where required, your consent. The primary purposes for which we process your personal information include:

• To respond to your enquiries and provide customer support
• To deliver our digital store and e-commerce services
• To communicate with you about our services, updates, and promotional offers
• To improve our website functionality and user experience
• To analyse website usage patterns and optimise our content
• To comply with legal obligations and protect our legitimate business interests
• To prevent fraud and ensure the security of our website and services

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds: (1) Consent - when you have given clear consent for us to process your personal data for specific purposes; (2) Contract - when processing is necessary for the performance of a contract with you; (3) Legal obligation - when we need to process your data to comply with legal requirements; and (4) Legitimate interests - when we have a legitimate business interest that does not override your fundamental rights and freedoms.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about the cookies we use, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except as described in this Privacy Policy. We may share your information with trusted service providers who assist us in operating our website and conducting our business, provided they agree to keep this information confidential. We may also disclose your information when required by law or to protect our rights, property, or safety.

International Data Transfers

As we operate within the European Union, your personal data is primarily processed within the EU/EEA. If we need to transfer your data outside the EU/EEA, we ensure appropriate safeguards are in place, such as adequacy decisions by the European Commission or standard contractual clauses approved by the European Commission.

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Contact form submissions and enquiries are typically retained for up to 3 years. Website analytics data is retained according to our analytics provider's retention policies. Marketing communications data is retained until you unsubscribe or withdraw consent.

Your Rights

Under GDPR, you have several rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you
• Right to Rectification: You can ask us to correct inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data in certain circumstances
• Right to Restrict Processing: You can ask us to limit how we use your data
• Right to Data Portability: You can request your data in a portable format
• Right to Object: You can object to processing based on legitimate interests
• Right to Withdraw Consent: You can withdraw consent for processing at any time

Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure server configurations, regular security assessments, and staff training on data protection principles.

Children's Privacy

Our services are not intended for children under the age of 16, and we do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated Privacy Policy on our website and updating the "Last updated" date at the top of this page.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the following contact information:

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we have not handled your personal data in accordance with applicable data protection laws.