PRIVACY POLICY

Last updated: 7 July 2026

Contact details:

Address: Stationslaan 152, 4815 GW Breda, the Netherlands
Chamber of Commerce (KvK): 97877670
Email: privacy@calmondigital.com

Scope

This policy applies to personal data that Calmon Digital processes for its own purposes as controller: data of our (prospective) customers, their contact persons, visitors to our website, and other business contacts.

Where we process personal data on behalf of our customers in the course of providing our services (for example, our customers’ leads and end-customer communications), we act as processor. That processing is governed by the Data Processing Agreement concluded with the relevant customer, not by this policy.

Personal data we process

Depending on your relationship with us, we may process:

first name, middle name and surname;
company name, job title, KvK and VAT number;
email address and telephone number;
postal and billing address;
bank details;
contract, quotation and invoicing data;
communication history (email, telephone, WhatsApp);
technical data of website visitors, such as IP address, browser and device information.

Purposes and legal bases

We process personal data only for the following purposes, on the corresponding legal bases:

Concluding and performing the agreement with you — necessary for the performance of a contract (Art. 6(1)(b) GDPR);
Maintaining contact and handling enquiries — legitimate interest in communicating with (prospective) customers (Art. 6(1)(f) GDPR);
Invoicing and administration — compliance with legal obligations, including tax law (Art. 6(1)(c) GDPR);
Informing you of new developments and offers — legitimate interest in marketing to existing business customers, or your consent where required; you may object or unsubscribe at any time;
Preventing and combating fraud and securing our services — legitimate interest (Art. 6(1)(f) GDPR).

Retention periods

We retain personal data no longer than necessary:

Customer and contract data: for the duration of the agreement and up to two (2) years thereafter, unless a longer period is necessary to establish, exercise or defend legal claims;
Financial and invoicing records: seven (7) years, in accordance with the Dutch statutory retention obligation (fiscale bewaarplicht);
Prospect and lead data: up to two (2) years after last contact;
Technical website data: up to twelve (12) months.

Security of personal data

We handle personal data with care and have taken measures to prevent misuse, loss, unauthorised access, unwanted disclosure and unauthorised modification, including:

the connection to our website (calmondigital.com) is established over a secure (TLS) connection;
systems on which personal data are processed receive security updates in a timely manner;
credentials are managed in a dedicated password manager and multi-factor authentication is enabled on administrative accounts;
everyone with access to personal data is bound by confidentiality obligations.

If you suspect that your data is not properly secured or have indications of misuse, please contact us at privacy@calmondigital.com.

We do not sell personal data. We share personal data with third parties only where necessary for the performance of our agreement with you or to comply with a legal obligation. Categories of recipients include:

hosting and infrastructure providers;
email and communication service providers;
our payment and invoicing provider;
our accountant and other professional advisers, where required.

Where these parties process personal data on our behalf, we conclude data processing agreements with them to ensure an equivalent level of security and confidentiality.

Some providers may process personal data outside the European Economic Area. Where this occurs, we ensure appropriate safeguards under Chapter V GDPR, such as an adequacy decision or the European Commission Standard Contractual Clauses.

Cookies on calmondigital.com

Our website uses functional cookies only. We measure website visits using a cookieless analytics tool that processes visitor data (such as IP address) only in hashed, anonymized form that cannot be traced back to an individual. No consent banner is therefore required. If we introduce third-party analytics or tracking in the future, we will update this policy and request consent where required.

Your rights

Your data remains yours. You have the right to access the personal data we process about you, and to have it corrected or deleted. You may also withdraw any consent given, object to processing, request restriction of processing, and request that we transfer your data in a machine-readable format to you or an organisation designated by you.

Requests can be sent to privacy@calmondigital.com. To verify your identity, we will use the contact details known to us (for example, by confirming the request via your registered email address); we do not ask for a copy of your identity document. We will respond within one month.

Automated decision-making

We do not use personal data for automated decision-making, including profiling, that produces legal or similarly significant effects.

Complaints

You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): https://autoriteitpersoonsgegevens.nl

Changes

Calmon Digital may amend this privacy policy from time to time. Material changes will be announced on our website. This privacy policy was last amended on 3 July 2026.

Your data,handled plainly.