Privacy Statement

Personal data

Personal data is information about an identified or identifiable natural person. The controller processes the following data about you:

• First and last name
• Phone number
• Email address

We collect this data because you have provided it to us yourself, for example when entering into an agreement with us, or because you use our website or application.

If you are required to provide certain data, you will be informed of the possible consequences if this data is not provided.

Purposes and grounds for processing personal data

Calmido processes your personal data for certain purposes, as described below. In addition, the processing of your personal data for these purposes takes place on the basis of one of the legal bases. These legal bases include: consent, necessity for the performance of an agreement, or a legitimate interest. Legitimate interests may include: marketing, advertising, research, and analysis of our own products and services.

• Provision of services - The performance of a contract with you
• Building and maintaining a customer relationship - Calmido's legitimate interest
• Processing, administering, and invoicing orders - The performance of an agreement with you
• Providing customer service - The performance of an agreement with you
• Performing statistical analyses - Calmido's legitimate interest
• Marketing; to keep you informed of new products or services, newsletters, customer satisfaction surveys, questionnaires, and promotions - Consent

When we process personal data based on your consent, you have the right to withdraw this consent at any time.

Sharing with others

In certain cases, your data will be shared with third parties. Calmido may share data with: Third parties, such as regulators and other authorities, in order to comply with legal obligations.

Your data will only be transferred to the above third parties for the purposes stated in this privacy statement, and only to the extent permitted by this privacy statement and applicable laws and regulations, or if Calmido is obliged to provide personal data to a competent authority. Third parties to whom we may provide your data are themselves responsible for complying with privacy legislation. Calmido is not responsible or liable for the processing of your personal data by these third parties.

In order to provide our services, we may be required to transfer your personal data to other countries that may or may not be members of the European Union and that guarantee an adequate level of protection. When this is the case, we take all necessary measures to transfer the personal data to such countries in a lawful manner.

Your rights

As a data subject, you have the following rights:

• The right of access, which means that you can request access to the personal data we have collected about you
• The right to rectify or correct your data
• The right to erasure of your personal data
• The right to restrict the processing of your personal data
• The right to data portability, which means that you have the right to receive your data in a structured, commonly used, and machine-readable format. You also have the right to transfer this data to another controller
• The right to object to profiling
• The right to lodge a complaint with the Dutch Data Protection Authority
• The right to withdraw your consent

The above rights can be exercised by submitting a request to: Calmido B.V. With regard to certain requests, we reserve the right to refuse your request if this is legally permissible.

Contact: legal@calmido.com

Security

We have taken appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing and against loss, destruction, damage, alteration, or disclosure. These measures will ensure appropriate security.

If you feel that your data is not properly secured or there are indications of misuse, please contact support@calmido.com.

Retention period

We do not retain your personal data longer than necessary for the purposes for which it was obtained, unless we are legally obliged to retain your personal data for a longer period. In principle, we will delete your data within 12 months after we have provided our services to you and/or you have visited our website.

If you request us to delete your data, we will do so within two weeks of receiving your request, unless we are legally obliged to retain your personal data for a longer period.

Changes to this privacy statement

We reserve the right to unilaterally change or supplement this privacy statement. We will announce these changes in accordance with the law. When substantial changes are made to this privacy statement, a clear notification will follow, for example via an email notification.

If you continue to use our services and/or website after the changes to this privacy statement have taken effect, this means that you accept these changes. If you do not agree with changes to this privacy statement, you must terminate your use of our services and/or website.

Contact

If you have any questions or comments about this privacy statement and/or the processing of personal data, please contact us at support@calmido.com.