Privacy Policy

1. Introduction

sadducaajk B.V. ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website sadducaajk.top or engage with our compliance consulting services.

2. Data Controller

3. Information We Collect

3.1 Personal Information

We may collect the following personal information:

• Name and contact details (email address, phone number, postal address)
• Company information (company name, position, industry)
• Communication preferences
• Information provided in enquiry forms or during consultations
• Payment and billing information (when applicable)

3.2 Technical Information

• IP address and location data
• Browser type and version
• Operating system
• Website usage data and analytics
• Cookies and similar tracking technologies (see our Cookie Policy)

4. How We Use Your Information

We process your personal data for the following purposes:

• Service Provision: To provide compliance consulting services and respond to your enquiries
• Contract Performance: To fulfil our contractual obligations and manage client relationships
• Communication: To communicate with you about our services, updates, and relevant information
• Legal Compliance: To comply with legal obligations and regulatory requirements
• Business Operations: To improve our services, website functionality, and business processes
• Marketing: To send relevant information about our services (with your consent where required)

5. Legal Basis for Processing

Under GDPR, we process your personal data based on:

• Contract: Processing necessary for contract performance or pre-contractual measures
• Legitimate Interests: For business operations, service improvement, and direct marketing
• Legal Obligation: To comply with legal and regulatory requirements
• Consent: Where you have provided explicit consent for specific processing activities

6. Data Sharing and Disclosure

We may share your personal data with:

• Service Providers: Third-party providers who assist with our business operations (hosting, analytics, payment processing)
• Legal Authorities: When required by law or to protect our legal rights
• Business Partners: With your consent, for joint service provision
• Professional Advisors: Lawyers, accountants, and other professional service providers

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, including adequacy decisions, Standard Contractual Clauses, or other approved transfer mechanisms under GDPR.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

• Client data: For the duration of the business relationship plus 7 years for legal and tax purposes
• Marketing data: Until you withdraw consent or we no longer have a legitimate interest
• Website analytics: Typically 26 months
• Legal obligations: As required by applicable law

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Access: Request information about how we process your data
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Restriction: Request limitation of processing in certain circumstances
• Data Portability: Request transfer of your data in a structured format
• Object: Object to processing based on legitimate interests or for direct marketing
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@sadducaajk.top. We will respond within one month of receiving your request.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption, access controls, regular security assessments, and staff training on data protection.

11. Cookies and Tracking

Our website uses cookies and similar tracking technologies. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

13. Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal data, please contact us immediately.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

15. Complaints and Supervisory Authority

If you have concerns about how we handle your personal data, please contact us first at privacy@sadducaajk.top. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.

16. Contact Information

For any questions about this Privacy Policy or our data processing practices, please contact: