Privacy Policy

• in connection with services
  When you conclude a contract with us, we ask you to provide us with personal data. This data is used to carry out the service or services. The data is stored on our own secure Hooray servers or those of a third party. We will not combine this data with any other personal data we have.

• for the purposes of communication
  When you send us email, messages, documents or pictures, there may be times when we retain them. Sometimes we ask you for your personal data that is relevant for the situation concerned. This ensures we can answer your questions and/or process your requests. We will not combine this data with any other personal data we have. Under no circumstances will this data be shared with third parties without explicit consent.

• to use our website and/or the Hooray Platform
  Our website uses cookies (small text files placed on your handset/computer) to help the website analyse how users use the website. The cookies used mostly contain analytical information relating to your visit.

The provision of your personal data to us is not based on a statutory duty. In other words, you are not required by law to share your personal data with us. But when we conclude a contract with you, we need specific personal data from you to perform that contract. If you do not provide us with this personal data, we simply cannot conclude a contract with you and provide services for you. We can also ask you for specific personal data to use our website. If you do not provide this data, we cannot guarantee that our website will work properly.

We only use the personal data collected for the following purposes:

• We use your name and address details, telephone number, email address, Dutch Chamber of Commerce details, VAT number and IBAN details to correspond with you, for quotations, for billing and to send you other documents needed for the contract and its performance.
• From time to time we use your name and address details to send you promotional gifts or to invite you to certain events.
• If provided by you, we use user names, passwords, FTP data, hosting data, database data, IP addresses, location data and any other data you provide for the provision of our service through our Hooray platform.
• If you have completed an assessment form, we will use your name, email and other personal data from the form with the aim of enhancing our service.
• If you contact us using the online support tool on our website or Hooray Platform, we will use the data you provide and the questions you ask with the aim of providing support in the provision of our services.

Hooray uses cookies on the website and through the application. Cookies are small text files that are stored on your computer when you visit this website or use the application. This allows us to process data, to see for example whether our website is working properly, what you click on or what data you have left behind or downloaded. Unless otherwise stated below, in most cases we cannot trace back to you personally. These cookies are set by default when you use the website. If you wish, you can delete these cookies at any time. When you use the application these cookies are set to off by default. See also the guide in your browser. If you change your settings, certain functions may no longer be available.

We use Google Analytics, supplied by the American company Google, to record the statistics relating to the use of our services on our marketing website (not in the Hooray application). To do this Google places analytical cookies in your browser and presents the anonymised information to us so we can understand how our visitors use the website. Google can pass this information to third parties if it is required to do so by law or to the extent that third parties process the information on Google’s behalf. This is why we have concluded a data processing agreement with Google. Google is not therefore allowed to use the information collected for other Google services or purposes. We have also disabled the forwarding of IP addresses to Google through Google Analytics. You will find further information about the Google Analytics privacy policy here (policies.google.com/privacy/archive?hl=nl).

We use the Hotjar cookie and the Visual Website Optimizer cookie to record what you click on when you visit our marketing website (not the Hooray application) and to optimise the website experience. See how we ensure that this data remains private in the Hotjar Privacy Statement (www.hotjar.com/legal/policies/privacy/) and the Visual Website Optimizer Privacy Statement (vwo.com/privacy-policy/).

We use cookies from Facebook (Pixel), LinkedIn, Bing (Microsoft) and Google Adwords, but also from buttons (social plug-ins as part of social media) to promote or share pages and/or advertisements on the social networks Facebook and LinkedIn. These buttons are created by a code supplied by Facebook, Bing, LinkedIn and Google Adwords themselves. In this way cookies for instance are placed on our marketing website (not in the Hooray application). This privacy policy does not apply to these social network websites. See the privacy policy of Facebook (www.facebook.com/privacy/explanation), LinkedIn (www.linkedin.com/legal/ privacy-policy), Bing (privacy.microsoft.com/nl-nl/privacystatement) and Google (policies. google.com/privacy/archive?hl=nl) to see how they deal with processing your personal data, which they receive on the basis of this code. Do this regularly because their privacy policy may be updated at any time.

We use Intercom Messenger cookies. As a user of our website or Hooray platform you can use these cookies to communicate with us and we can use them to give first-line support. See the Intercom cookie policy here (www.intercom.com/legal/cookie-policy) to see how they handle the processing of your personal data, which they receive through these cookies. Do this regularly because this cookie policy may be updated at any time.

We do not sell your data to third parties. There may however be times when we engage third parties to process specific personal data under our supervision and responsibility. These third parties are mainly located in the European Economic Area (EEA). A number of third parties may be located in countries outside the EEA, such as the United States, where an appropriate level of protection for your personal data, as is offered in the EEA, may not apply. To protect your personal data and to fulfil our statutory duty, we will only engage third parties as processors who offer sufficient guarantees regarding the application of suitable technical and organisational security measures. We will conclude a data processing agreement with these third parties, by which sufficient protection will be provided in respect of your personal data. These third parties may not then use the personal data in any other way than that for which we have given instructions.

Parties with which Hooray BV has concluded a data processing agreement are:

• ActiveCampaign – CRM (www.activecampaign.com)
• MoneyBird – bookkeeping (www.moneybird.nl)
• Stripe – payment service provider (www.stripe.com)
• GitLab – development environment (www.gitlab.com)
• Intercom – support (www.intercom.com)
• Saber – feedback tool (www.saberfeedback.com)
• Zapier – interface between described tools (zapier.com)
• Slack – internal communication (www.slack.com)
• Calendly – planning tool (www.calendly.com)
• Google – Google Calendar, Google Drive, Google Email, Google Analytics (www.google. com)
• Advertising on Facebook (www.facebook.com), Linkedin (www.linkedin.com), Bing/ Microsoft (www.bing.com), Google Adwords (www.google.com)
• Oxillion – hosting (www.oxillion.nl)
• Microsoft Azure – cloud hosting (azure.microsoft.com/)
• TypeForm – survey tool (www.typeform.com)

We do not retain your personal data for any longer than is necessary for the purposes for which it is used. When we have concluded a contract with you, we retain your personal data for a maximum of one year after the contract has been terminated, unless there is a statutory duty to retain your data for longer than stated above. It may also be necessary to retain your personal data for longer in connection with proceedings, complaints and/or disputes, for the protection of our interests in this regard.

This privacy policy does not apply to third-party websites and third-party services to which there is a link from our website. We cannot guarantee that these third parties will handle your data safely and reliably. We recommend you read the privacy policy of these third parties before using their website or their services.

If you have any questions about our privacy policy or about access and changes to (or erasure of) your personal data, please contact us at any time by telephone, email or post.

You have the right to access your personal data that we use at any time. At your request you will receive a summary of your personal data that we have used. If there are any inaccuracies in your personal data that we use, you have the right to have them rectified. If you believe that the personal data is incomplete for the purpose for which it is used, you can have it completed by sending us a statement to this effect.

You have the right to have us erase your personal data that we use. At your request we will comply with this request as soon as possible.

Instead of erasing your personal data you also have the right to ask us to restrict its use. This means that we will not use or we will only partially use your personal data during the period of restriction. You have this right to restrict when:

• You dispute the accuracy of the personal data we use and we are verifying this accuracy;
• The use of your personal data is unlawful, but you do not want us to erase the personal data;
• We no longer need your personal data, but you need it for the purposes of legal action;
• You have objected to us using your personal data and the question of whether our interests in its use outweigh your interests in the objection is under investigation.

When there is a restriction of use, we will only use that personal data for which we have your consent or which is necessary for legal action. Likewise we will not restrict use when use is necessary for the rights of other persons or for other compelling reasons. If the restriction is lifted, we will advise you thereof.

You may wish to transfer your personal data that we use to another party. We will cooperate with this at your request. In this case you can choose to transfer the data to yourself or directly to the other party.

You have the right to object to our use of your personal data. In the event of an objection, we will stop using your personal data, unless we have compelling justified reasons for continuing to use it and these reasons outweigh your interests. In the context of legal action too we may have a reason not to stop use.

Where we use your personal data for direct marketing purposes, such as offers by email, you can object to this (opt out). We will then stop using your personal data for these direct marketing purposes.

You have the right to withdraw your consent for us using your personal data at any time. We will stop using your personal data at your request. Important: the withdrawal of consent does not have retrospective effect however.

We do not use automated decision-making to which legal consequences for you are attached or that affects you significantly in some other way.

If you have a complaint about the way in which we use your personal data, you can of course raise the matter with us. We will then seek to work things out together with you.

However, you also have the right to submit a complaint to the Dutch Data Protection Authority. You will find information on how to do this on the Authority’s website (autoriteitpersoonsgegevens.nl/en).