Privacy Policy

1. Contact Information

Stephen Emmer B.V.

Koninginneweg 11

1071 HZ Amsterdam

The Netherlands

Email: office@stephenemmer.com

Website: www.stephenemmer.com

2. Personal Data We Process

We process personal data only when you use the contact form on our website. The personal data we collect is limited to:

• First and last name

• Email address

• Company name

This information is used solely to respond to your enquiry and to maintain continued communication regarding your query. We do not use this data for any other purpose.

We do not use cookies or any other tracking technology on our website. No other personal data is collected from visitors.

3. Legal Basis for Processing

We process your personal data on the basis of your consent (Article 6(1)(a) GDPR) when you voluntarily submit the contact form, and/or on the basis of our legitimate interest (Article 6(1)(f) GDPR) in responding to your enquiry.

4. Purpose of Processing

Stephen Emmer B.V. processes your personal data exclusively for the purpose of:

• Responding to messages or requests submitted via the contact form; and

• Ongoing communication related to your original enquiry.

5. Data Retention

Stephen Emmer B.V. does not retain your personal data for longer than is strictly necessary to fulfil the purposes for which it was collected. Once the purpose has been achieved and there is no legal obligation to retain the data, it will be securely deleted.

6. Sharing Personal Data with Third Parties

Stephen Emmer B.V. does not sell, trade, or otherwise transfer your personal data to third parties, except:

• Where necessary for the performance of an agreement with you; or

• Where required to do so by law or to report a criminal offence to the competent authorities.

We do not share personal data for marketing or advertising purposes.

7. Automated Decision-Making

Stephen Emmer B.V. does not engage in automated decision-making or profiling as referred to in Article 22 of the GDPR. No decisions with significant consequences for individuals are made solely by automated means.

8. Children's Data

Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16 years of age without verified parental or guardian consent, in accordance with Article 8 of the GDPR.

We are unable to technically verify the age of visitors. We encourage parents and guardians to monitor and guide their children's online activity. If you believe we have inadvertently collected personal data from a child under 16 without appropriate consent, please contact us immediately at office@stephenemmer.com and we will take prompt steps to delete the data.

9. Your Rights Under the GDPR

As a data subject under the GDPR, you have the following rights:

• Right of access (Article 15) : you may request a copy of the personal data we hold about you.

• Right to rectification (Article 16) : you may request correction of inaccurate or incomplete data.

• Right to erasure (Article 17) : you may request deletion of your personal data ('right to be forgotten').

• Right to restriction of processing (Article 18) : you may request that we limit the processing of your data.

• Right to data portability (Article 20) : you may request that your data be transferred to you or to another controller in a structured, commonly used, machine-readable format.

• Right to object (Article 21) : you may object to the processing of your personal data based on legitimate interests.

• Right to withdraw consent : where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please submit a written request to: info@stephenemmer.com

To verify your identity, we may ask you to provide a copy of a valid identity document. Please redact your passport photo, the machine-readable zone (MRZ), passport number, and citizen service number (BSN) before sending. We will process your request within four weeks of receipt, in accordance with Article 12 GDPR.

10. Data Security

Stephen Emmer B.V. takes the security of your personal data seriously and implements appropriate technical and organisational measures to protect against unauthorised access, disclosure, alteration, or destruction, in accordance with Article 32 GDPR.

If you suspect that your data is not properly secured or that there are indications of misuse, please contact us at office@stephenemmer.com.

11. Right to Lodge a Complaint

You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), the supervisory authority responsible for enforcing data protection law in the Netherlands, if you believe that your personal data is being processed in violation of the GDPR.

You can file a complaint via: https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons

12. Changes to This Privacy Statement

We reserve the right to update this privacy statement from time to time to reflect changes in legislation or our data processing practices. The most current version will always be available on our website. We recommend reviewing this statement periodically.