Grassfeld Privacy- en cookieverklaring.

You may always contact us if you have questions regarding our privacy policy or if you wish to view, modify, or delete your personal data. This can also be done within our applications.
‍

For questions about privacy or to exercise your privacy rights, you may contact us via: support@grassfeld.com.

You have the following rights:

• Right of access: you have the right to inspect which personal data we have processed about you;
• Right to rectification: you have the right to correct personal data we have processed about you if this data is incorrect in whole or in part;
• Right to complain: you have the right to submit a complaint regarding the processing of your personal data by us, or regarding direct marketing;
• Right to be forgotten: you may submit a request to have the personal data we have processed about you deleted;
• Right to data portability: where technically possible, you have the right to request that we transfer your processed personal data to a third party;
• Right to restriction of processing: you may request that we temporarily restrict the processing of your personal data.

When submitting your request, we may ask you to identify yourself. We request information for this purpose to ensure that you are the correct person to whom the personal data belongs.
‍

We will generally respond to your request within one month. This period may be extended if the request proves to be complex or relates to a specific right. You will be informed about any extension of this period.

Apart from parties necessary to provide the above-mentioned services, we do not under any circumstances provide your personal data to other companies or organizations unless we are legally required to do so, for example, when law enforcement authorities require access to personal data in case of suspected criminal activity.
‍

When personal data is transferred to a third party outside the EU, we take steps to ensure the necessary safeguards are in place.
‍

The European Commission has adopted adequacy decisions for several countries. Based on an adequacy decision, personal data may safely be transferred from the EEA to companies in these countries without additional safeguards.
‍

If we share data with companies in other countries without an adequacy decision, or U.S. companies not covered by the EU-U.S. Data Privacy Framework, we implement additional protective measures in the form of appropriate safeguards. These include, among other things, Standard Contractual Clauses (“SCCs”), additional security measures, and contractual arrangements.
‍

When we transfer your personal data to parties outside the EEA based on SCCs, you have the right to:

• request information regarding the transfer, including a copy of the relevant safeguards;
• contact us or the receiving party;
• lodge a complaint with the Dutch Data Protection Authority or a competent court.

Our online services may contain social media buttons. These buttons may be used by the providers of these services to collect personal data.