Privacy Policy

Introduction

This Privacy Policy describes how eastwind B.V. ("we", "us", "our", or "eastwind") collects, uses, and protects your personal information when you visit our website eastwind.pro or interact with our services. We are committed to protecting your privacy and ensuring transparency about our data practices.

As a company based in the Netherlands and operating within the European Union, we comply with the General Data Protection Regulation (GDPR) and other applicable privacy laws. This policy explains your rights regarding your personal data and how we ensure its protection.

Data Controller Information

The data controller for your personal information is:

Data We Collect

The data we collect depends on how you interact with our website and services. We may collect the following types of personal information:

Information You Provide Directly

• Name and contact details when you submit contact forms or subscribe to our content
• Email address for communications and updates
• Phone number if provided in contact forms
• Message content and enquiry details when you contact us
• Any other information you choose to provide when communicating with eastwind

Information Collected Automatically

• IP address and approximate geographic location
• Browser type, version, and operating system
• Pages visited, time spent on pages, and navigation patterns
• Referring website or source that directed you to our site
• Device information including screen resolution and device type
• Cookies and similar tracking technologies (see our Cookie Policy for details)

How We Use Your Information

We use your personal data for the following purposes, based on legitimate legal grounds under GDPR:

Communication and Support

We use your contact information to respond to your enquiries, provide customer support, and communicate with you about our services. This includes processing contact form submissions and maintaining correspondence records.

Website Functionality and Improvement

We use technical information to ensure our website functions properly, improve user experience, and analyse usage patterns. This helps us understand how our content is being accessed and how we can enhance our services.

Legal Compliance

We may process your data to comply with legal obligations, such as responding to lawful requests from authorities or maintaining records as required by applicable laws.

Content Personalisation

With your consent, we may use information about your preferences and browsing behaviour to personalise content recommendations and improve your experience with eastwind's technology coverage.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for specific processing activities
• Legitimate Interest: For website analytics, security, and improving our services
• Contractual Necessity: To provide services you've requested or respond to your enquiries
• Legal Obligation: To comply with applicable laws and regulations

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your data in the following limited circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our website and providing services, under strict confidentiality agreements
• Legal Requirements: When required by law, court order, or to protect our legal rights and interests
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business
• Consent: With your explicit consent for specific purposes

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy or as required by law. Our retention periods are determined based on:

• The nature and sensitivity of the data
• The purposes for which we process the data
• Legal and regulatory requirements
• The need to protect our legitimate interests

Contact form submissions and correspondence are typically retained for three years from the date of last contact. Website analytics data is retained for 26 months. When data is no longer needed, we securely delete or anonymise it.

Your Rights

Under GDPR and applicable privacy laws, you have the following rights regarding your personal data:

• Right of Access: Request information about the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for processing activities that require it

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below. We will respond to your request within one month of receipt.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Employee training on data protection practices
• Secure hosting and infrastructure providers

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to maintaining the highest standards of data protection.

International Data Transfers

As eastwind operates primarily within the European Union, your data is generally processed within the EU/EEA. If we need to transfer your data outside the EU/EEA, we ensure appropriate safeguards are in place, such as:

• European Commission adequacy decisions
• Standard Contractual Clauses approved by the European Commission
• Binding Corporate Rules for multinational companies
• Your explicit consent for the transfer

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyse website usage. For detailed information about the cookies we use, their purposes, and how to manage them, please refer to our Cookie Policy.

Children's Privacy

Our website and services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete that information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a new "Last Updated" date. We encourage you to review this policy periodically to stay informed about how we protect your privacy.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your personal data, please contact us:

We aim to respond to all privacy-related enquiries within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local data protection authority.

Supervisory Authority

If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with the relevant supervisory authority: