Privacy Policy

1. Introduction

Welcome to Sustalium B.V. i.o. ("Company," "we," "us," "our"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or otherwise interact with us. This policy applies to our marketing, sales, and general business contact data, not the data you process within our Sustalium platform as a customer (which is governed by our DPA).

2. Who We Are

The data controller for your information is:

3. What Information We Collect

We may collect information about you in a variety of ways:

• Personal Data You Provide to Us: We collect your name, email address, phone number, and any other information you provide when you fill out a contact form, request a demo, or subscribe to our newsletter.
• Data We Collect Automatically: When you visit our website, we may automatically collect information such as your IP address, browser type, operating system, and information about your usage of our site through cookies and similar technologies.

4. How We Use Your Information (Purpose and Legal Basis)

We use the information we collect for the following purposes, based on these legal grounds under GDPR:

• To Respond to Your Inquiries: To provide you with information or a demo that you have requested. (Legal Basis: Legitimate Interest)
• To Send Marketing Communications: To send you our newsletter or other marketing materials, but only if you have given us your explicit consent to do so. (Legal Basis: Consent)
• To Operate and Improve Our Website: To understand how visitors use our website and to improve its functionality and user experience. (Legal Basis: Legitimate Interest)
• To Comply with Legal Obligations: To comply with any legal or regulatory requirements. (Legal Basis: Legal Obligation)

5. Who We Share Your Information With

We do not sell your Personal Data. We may share your information with trusted third-party service providers who perform services for us or on our behalf, such as:

• Cloud hosting providers (e.g., Google Cloud Platform)
• CRM and marketing automation providers
• Analytics providers (e.g., Google Analytics)

We require all third parties to respect the security of your Personal Data and to treat it in accordance with the law.

6. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you are resident. These countries may have data protection laws that are different from the laws of your country. Where we transfer your data outside the European Economic Area (EEA), we do so on the basis of legally-approved mechanisms, such as the EU Standard Contractual Clauses (SCCs).

7. How Long We Keep Your Information

We will only retain your Personal Data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

8. Your Data Protection Rights under GDPR

You have the following rights regarding your Personal Data:

• The right to access: You can request a copy of the data we hold about you.
• The right to rectification: You can ask us to correct any inaccurate data.
• The right to erasure ("right to be forgotten"): You can ask us to delete your data.
• The right to restrict processing: You can ask us to suspend the processing of your data.
• The right to data portability: You can ask us to transfer your data to another organization.
• The right to object: You can object to our processing of your data.

To exercise any of these rights, please contact us at dpo@sustalium.com.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and use personal information about you. For more information about the types of cookies we use and how you can control them, please see our Cookie Policy.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact our Data Protection Officer at: dpo@sustalium.com