Spryng Website Privacy Policy

Document Release:

This document remains the property of Commify. Release to regulatory authorities is permitted as required. Release to other organisations or individuals may only be authorised by Commify Directors.

Our policy Introduction Who we are We are Spryng B.V (“Spryng”, “us”, “we”, “our”). Please see the “Sharing your Personal Data” section for more information relating to entities within the Commify Group structure.  We are  a company registered in the Netherlands with its registered office at Prinsengracht, 1017 JX Amsterdam, registered with the Chamber of Commerce under number 62962825 and VAT number NL 8550.30.884 B01. If you are a Californian resident, please review the section of this Privacy Policy for Californian Residents.If you are a resident of Australia, please review the section of this Privacy Policy for Australian Residents. What we do Commify Group is in the business of providing business messaging services. We work with a large portfolio of companies helping them to transform their mobile communications with their customers and staff. We provide SMS, voice, web, IP/OTT, including RCS and WhatsApp, email and intelligent multichannel services both on a self-serve basis and as tailored solutions for more complex needs through our portfolio of messaging brands. We are committed to protecting the privacy and security of the Personal Data we process about you.  Controller Unless we notify you otherwise, such as below, we are the controller of the Personal Data we process about you. This means that we decide what Personal Data to collect and how to process it. Processor  Where you have received a message from one of our customers, please see their own Privacy Policy for more information about how your Personal Data is processed when you engage with their services or otherwise interact with them. Additionally, where you use our platform, please see our Data Processing Agreement for more information regarding how we use your Personal Data. Purpose of this Privacy Policy  The purpose of this Privacy Policy is to explain what Personal Data we collect about you and how we process it. This Privacy Policy also explains your rights, so please read it carefully. If you have any questions, you can contact us using the information provided below under the ‘How to contact us’ section. Who this Privacy Policy applies to This Privacy Policy applies to you if: 1.You visit our website(s)  2.If you have registered as a user If you visit our website, we will collect information about your engagement with us online via our cookies and similar technologies such as your IP address and geographical location. See our Cookie Policy for more information on our use of cookies and similar technologies. What is Personal Data ‘Personal Data’ means any information from which someone can be identified by either directly or indirectly. For example, you can be identified by your name or an online identifier.  Information we collect from you and how we use it The type of Personal Data we collect about you will depend on our relationship with you.  We collect most of the Personal Data directly from you via our website and your interactions with it. We collect certain personal data from you when you interact with our company’s other digital properties. This data (which may include information collected via cookies, such as hashed email addresses for conversion tracking) may be combined with data from the Connect platform for the purposes of marketing attribution and performance measurement, such as measuring the effectiveness of our advertising campaigns and performing customer analysis. We may also collect your Personal Data from third parties such as: Amplemarket (Amplemarket Privacy Policy). We utilize Amplemarket to source and manage professional contact data, including business email addresses, phone numbers, and LinkedIn profiles, as well as intent-based insights, to streamline our sales outreach and provide highly relevant B2B engagement. Linkedin Sales Navigator (Linkedin Privacy Policy). We process professional data via LinkedIn Sales Navigator under our legitimate interest to conduct B2B sales and marketing. This processing involves the collection of professional identifiers and employment data to facilitate direct networking and to maintain up-to-date information on business decision-makers within our target sectors Lusha (Lusha Privacy Policy). To maintain accurate records and better tailor our services, we supplement our contact database with professional profile data (such as verified business contact details and job roles) provided by Lusha Zoominfo (Zoominfo Privacy Policy). Zoominfo will provide Commify with your Personal Data to enable us to contact you about our products and services. You also have the right to obtain copies of the Data Processing Agreement between Us and Zoominfo, available here. Purposes and lawful bases  We will only use your Personal Data when the law allows. Most commonly, we will use your Personal Data in the following circumstances:		Spryng is committed to protecting your data and preserving your privacy. This policy details how we will protect your information.Spryng is a Controller and a Processor of Personal Data; This Privacy Policy only applies to data we control; for example, the data we collect from you to provide you with products and services.For more information on how We process data (data that You transfer to Us for sending communications), please see this page.You can change your communication preferences by contacting support at [email protected] for users in the Netherlands and Belgium, or [email protected] for users in Germany. Alternatively you can opt out of any communication you receive by clicking unsubscribe. This section sets out the data We collect from you to provide our products and services. We have divided the types of data into categories of individuals, detailing what Personal Data we process relating to each category and our lawful basis for processing your information.Please note that where your Personal Data is processed because it is necessary for the performance of a contract to which you are a party, we will be unable to provide our services without the required information.
Categories of individuals	Categories of Personal Data	Purpose of processing	Lawful basis
Customer users and website visitors	Company NameCompany Telephone NumberFirst/Last NameEmail address*Also marketing information and preferences	To assess the legitimacy of the signup information submitted by the user	Legitimate interests to protect our services, systems, users and business from fraudulent and improper use
Customer users and website visitors	Account DataTrading nameCompany addressIndustry TypeCompany Website (optional)Company Registration numberVAT NumberT&C’s acceptance	To perform account related activities	Performance of the contract between you and us, to operate our website, to issue  bills and statements, to communicate with users including for the purpose of lead generation and to send personalised messages, to ensure the ongoing security of our websites and services and to maintain backups of our databases
Customer users and website visitors	IP addressGeographical locationBrowser type and versionDevice’s operating systemThe referral sourceThe length of your visitThe website pages you viewThe website navigation paths, as well as details of timing, frequency and pattern of Your use of our service.Record Your interactions and engagements with our website, products and services	To monitor and improve our website	Legitimate interests to be able to administer our website and business
Customer users and website visitors	You or your employer’s contact detailsYou or your employer’s card details and details of the transaction.	To supply purchased products and services and for transactional records	Performance of contract
Customer users and website visitors	Your contact information	To subscribe you to our email notifications and/or newsletters	Your consent You can withdraw your consent at any time.
Customer users and website visitors	Your contact information	To send you service communications	Performance of a contract
Customer users and website visitors	Email AddressTelephone NumberFirst/Last Name (if they choose to supply)	Establishment, exercise or defence of legal claims, for the protection of the business against risk, and where necessary to comply with legal obligations, to protect data subjects vital interests or those of another natural person	Legitimate interest to protect the business against riskLegal obligationVital interests
Sharing your Personal Data We may also disclose your information to third parties in connection with other purposes set out in this policy. These third parties may include: Auth0/Okta- (Auth0/Okta Privacy Policy) Account Data and Usage Data is shared with the supplier for the purpose of securing and authenticating user accounts.  CrazyEgg – (CrazyEgg Privacy Policy) Account Data and Usage Data is shared with the supplier for the purposes of analysis of the online behaviour and voice of website users (through analysis and feedback tools) Docusign – (Docusign Privacy Policy) Account Data is shared with the supplier for the purpose of executing contractual agreements with Commify  eTrusted Shops (eTrusted Privacy Notice) – Account data and transaction data is shared with the supplier for the purpose of receiving customer feedback and reviews of our products and services. Facebook / Meta Pixel – (Meta Privacy Policy) – Usage Data, Browser/Device Characteristics, and IP address are shared with the supplier for the purpose of measuring advertising effectiveness, website conversion tracking, and creating targeted custom audiences.  Feefo (Feefo Privacy Policy) – Account data and transaction data is shared with the supplier for the purpose of receiving customer feedback and reviews of our products and services. Google Ads/Google Marketing Platform – (Google Services Privacy Policy) – Usage Data, Hashed Account Data, Hashed Transaction Data, is shared with the supplier for the purpose of measuring advertising effectiveness and to create targeted and exclusion audiences Google Adwords (Google Services Privacy Policy) – Usage data and elements of Account Data (email address) is shared with the supplier for the purpose of advertisement retargeting based on website traffic data. Google Analytics (Google Services Privacy Policy) – Usage data is shared with the supplier for the purpose of providing web analytics of your use of our website. Hubspot (Hubspot Privacy Policy) – Account Data and Usage Data is shared with the supplier for the purposes of online form hosting, lead nurturing,and marketing automation. Leadinfo (Leadinfo Privacy Policy) IP Addresses, Behaviour and Usage data is shared with Leadinfo for the purpose of lead generation, to combine data with publicly available company data such as company name and address. LinkedIn Sales Navigator (LinkedIn Sales Navigator Privacy Policy) – Account Data is shared with the supplier for the purpose of delivering personalised lead recommendations and insights LinkedIn Insight Tag – (LinkedIn Privacy Policy) – Usage Data, IP address, device/browser characteristics, and page views are shared with the supplier for the purpose of tracking website conversions, uncovering professional demographic insights, and enabling retargeting campaigns  LiveChat (LiveChat Privacy Policy) – Account Data is shared with the supplier for the purpose of answering sales and customer support enquiries via our website. Luminance (Luminance Privacy Policy) Account Data is shared with the supplier for the purpose of reviewing, analysing and storing contractual agreements with CommifyMailjet (Mailjet Privacy Policy) – Account Data is shared with the supplier for the purpose of communicating with you via email in relation to your account, including but not limited to transactional emails and account notifications. Marketo (Adobe) – (Marketo Privacy Policy) – Account Data and Usage Data is shared with the supplier for the purposes of online form hosting, lead nurturing, bulk email, and marketing automation. Pendo (Pendo Privacy Policy) – Usage data is shared with the supplier for the purpose of providing web analytics of your use of the website, and delivering relevant help content to users. Salesforce (Salesforce Privacy Policy) – Account Data and Transaction Data is shared with the supplier for the purposes of account management and support, marketing and analysis. Sift (Sift Privacy Policy) Used during our sign up process to assess the legitimacy of the information provided by the user. Account, usage and signup data categories are used to perform this analysis. SoPro (SoPro Privacy Policy) A digital marketing agent appointed to conduct marketing activity on our behalf; such activity may result in the compliant processing of personal information. Stripe – (Stripe Privacy Policy)  We will share your transaction data with our payment service provider for the purposes of processing your payments for our goods and services, to process refunds of payments where applicable and to handle complaints and queries relating to any payments and refunds processed. WhatsApp / Meta (Meta Group Privacy Policy) – We may share your name and contact details with WhatsApp / Meta in order to communicate with you about our products and services. We will also share your account data with WhatsApp if you sign-up to use our WhatsApp messaging products and services, this is for the purpose of creating, managing and administering your WhatsApp for Business account. Xing – (Xing Privacy Policy) – Usage Data and technical identifiers are shared with the supplier for the purpose of tracking conversions from B2B social network interactions and measuring the effectiveness of our professional networking outreach.  YouTube (Google Services Privacy Policy) – Usage data is shared with the supplier for the purpose of providing analytics on website video interactions hosted on YouTube. Zapier (Zapier Privacy Policy) Account data is shared with the supplier for the purpose of allowing us to send Esendex SMS as part of automated workflows from Hubspot. Zopim (Zopim Privacy Policy) Account Data is shared with the supplier for the purpose of answering sales and customer support enquiries via our website. Other disclosures we may make In addition to the specific purposes for which we may process any of the categories of data set out in this section, we may also process any of the categories of data if this is necessary to comply with a legal obligation, or to protect your vital interests or those of another natural person. We may also process your Personal Data where such disclosure is necessary for the establishment, exercise or defense of legal claims, whether in court proceedings or in an administrative or out-of-court procedure. We may disclose your personal data to our insurers and/or professional advisers for the purposes of insurance coverage (whether obtaining or maintaining it), for risk management, to obtain professional advice or in defense of legal claims, whether in legal proceedings. judicial or in administrative or extrajudicial processes. Conservation and deletion of personal dataThis section sets out our policy on the retention of your data, this helps to ensure that we comply with our legal obligations for the retention and deletion of personal data. Personal Data that we process for any purpose or purposes will not be kept for longer than is necessary for that purpose or purposes. Because we provide an ongoing contract and service to you, it is not possible for us to specify in advance how long we will retain your personal data.  International transfers Your Personal Data may be processed outside of the UK and EU. This is because some of the organisations we use to provide our service to you are based outside the UK and EU or they use organisations based outside of the UK and EU to support them in providing their services to us.  We have taken appropriate steps to ensure that the Personal Data processed outside the UK and EU has an essentially equivalent level of protection to that guaranteed in the UK/EU. We do this by ensuring that: – Your Personal Data is only processed in a country which the Secretary of State or European Commission has confirmed has an adequate level of protection (an adequacy regulation or decision), this includes where a company has self-certified to data privacy frameworks, such as the UK Extension to the EU-US Data Privacy Framework, or – We enter into an International Data Transfer Agreement (“IDTA”) or Standard Contractual Clauses (SCCs) (with the UK Addendum), or solely SCCs where the transfer is made from the EU, with the receiving organisation and adopt supplementary measures, where necessary.  Amendments We may update this policy from time to time by posting a new version on our website. You should check this page occasionally to ensure that you are happy with any changes to this policy. We may notify you of changes to this policy by email or by notification through our web application. Your rights You have certain rights in relation to the processing of your Personal Data, including to: – Right to be informedYou have the right to know what Personal Data we collect about you, how we use it, for what purpose and in accordance with which lawful basis, who we share it with and how long we keep it. We use our Privacy Policy to explain this. – Right of access (commonly known as a “Subject Access Request”)You have the right to receive a copy of the Personal Data we hold about you. –Right to rectification You have the right to have any incomplete or inaccurate information we hold about you corrected. – Right to erasure (commonly known as the right to be forgotten)You have the right to ask us to delete your Personal Data. – Right to object to processingYou have the right to object to us processing your Personal Data. This includes the use of your data in services like Google Customer Match. If you object to us using your Personal Data for marketing purposes, we will stop sending you marketing material.  – Right to restrict processingYou have the right to restrict our use of your Personal Data.  – Right to portabilityYou have the right to ask us to transfer your Personal Data to another party. – Automated decision-making. You have the right not to be subject to a decision based solely on automated processing which will significantly affect you. We do not use automated decision-making.   – Right to withdraw consentIf you have provided your consent for us to process your Personal Data for a specific purpose, you have the right to withdraw your consent at any time. If you do withdraw your consent, we will no longer process your information for the purpose(s) you originally agreed to, unless we are permitted by law to do so. – Right to lodge a complaintPursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR. You may exercise this right before a supervisory authority in the Member State of your residence, your place of work, or the place of the alleged infringement. An overview of the state data protection officers in Germany and their contact details can be found at the following link: https://edpb.europa.eu/about-edpb/about-edpb/members_enBefore contacting the regulator, we would appreciate the opportunity to resolve your concerns directly. Please contact us via [email protected]  How to exercise your rights You will not usually need to pay a fee to exercise any of the above rights. However, we may charge a reasonable fee if your request is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances. If you wish to exercise your rights, you may contact us using the details set out below within the section titled ‘How to contact us’. We may need to request specific information from you to confirm your identity before we can process your request. Once in receipt of this, we will process your request without undue delay and within one month. In some cases, such as with complex requests, it may take us longer than this and, if so, we will keep you updated.   Consent You have the right to withdraw your consent at any time to the extent that this is the lawful basis for us processing your personal information. The withdrawal of your consent will not affect the legality of the previous processing. You may exercise any of your rights in relation to your personal data by notifying us in writing at [email protected] for users in the Netherlands and Belgium, or [email protected] for users in Germany. Alternatively you can contact our privacy team at [email protected] How to contact us If you wish to contact us in relation to this Privacy Policy or if you wish to exercise any of your rights outlined above, please contact us as follows: Spryng B.V, Prinsengracht 739 -741, 1017 JX Amsterdam  [email protected]  We have also appointed a Data Protection Officer (“DPO”). For UK, France, Netherlands and Spain data subjects, our DPO is Evalian Limited and can be contacted as follows:  [email protected] Evalian Limited , West Lodge, Leylands Farm, 1 Nobs Crook, Colden Common, Winchester  For Germany data subjects, our DPO is Steve Vetter, Vetter Consulting, Oschatzer Str. 46, 01127 Dresden For Italy data subjects, our DPO is Chiara Corniani, contactable at [email protected]. Privacy policy for Californian residents Introduction and scope Commify offers business communication services to business customers.  This Privacy Policy describes Commify’s policies and procedures regarding the collection, use, and disclosure of information when you use our websites or when you register to use our services. By visiting this website, you agree to the collection and use of information in accordance with this Privacy Policy. Information we collect We collect various types of information from individuals who visit this website (“Website Visitors”) and individuals who register to use our services (“Customers”), including: – Personal Information: When expressing an interest in obtaining additional information about Commify’s services or registering to use those services, we request personal contact information, such as your name, employer/organisation name, address, phone number, and email address. – Billing-Related Information: When purchasing our services, Commify requires you to provide financial qualification and billing information, such as your name and billing address, credit card number, and the number of employees within your organisation that will be using the services. We may also ask you to provide other information, such as the annual revenue of your organisation, number of employees, and/or the industry in which your organisation operates. – Usage-Related Data: information related to your use of this website as well as your internet browsing history and website-related preferences (such as your language preference). – Cookies and Tracking Technologies: As you navigate our websites, we may also collect information using website technology software and tools, which is standard practice for most websites. For example, the software tracks the action you take on this website (such as the web pages you viewed and the links you clicked). Information might also be collected through cookies and other internet tracking technologies. For more information, please see our Cookie Policy. How we use personal information and non-personal Information  We use personal and non-personal (non-identifiable) information to: – operate this website, improve website content and provide our services. For example, if you fill out a “Contact Me” form on our website, we will use the information you provided to contact you about your interest in our services. – communicate with you. – process transactions (Commify uses credit card information solely to check the financial qualifications of prospective customers and to collect payment for the services). – personalize your website experience. – market our services to you or others. For example, we may use information you provide to contact you to further discuss your interest in our services or to send you information regarding Commify and/or its partners, such as information about promotions or events. – protect this website and our computing systems from external cybersecurity threats. Website navigational information  As explained above in the Information we collect section, Commify may also collect information using website technology software, which is standard practice for most websites. These tools, which include cookies, web beacons and pixels collect information as you navigate a website. For example, when you visit this website, our servers send a cookie to your computer. Cookies can make interactions with this website easier and more relevant to you. For more information, please see our Cookie Policy. We also use website navigational information to operate and improve this website. We might use website navigational information alone, or in combination with personal information, to provide personalized information to customers and prospective customers. Sharing and disclosure of information Service Providers Commify might share personal information about our customers – which might include personal information about employees or agents of our customers – with third parties such as service providers. We share personal information with our service providers for these purposes: a. so the service providers can assist us in operating our services. b. so the service providers can contact our customers and website visitors who have provided their contact information. Third Parties/Partners Commify does not share, sell, or rent any personal information with third parties for their own independent promotional purposes. But from time to time, Commify might partner with other companies to jointly offer products or services. If you purchase or specifically express interest in a jointly offered product or service, Commify might share your personal information (as described above) and other information about your purchase or expression of interest with our joint promotion partner(s).  Commify does not control our business partners’ use of the information we collect, and their use of the information will be in accordance with their own privacy policies. If you do not wish for your information to be shared in this manner, you may opt not to purchase or specifically express interest in a jointly offered product or service. Commify uses a third-party service provider to manage credit card processing in a PCI DSS compliant manner. This service provider is not permitted to store, retain, or use billing information except for the sole purpose of credit card processing on our behalf. Disclosure required by law or to protect the company  Commify reserves the right to use or disclose personal and other information, if required by law or if we reasonably believe disclosing such information is necessary to protect our legal rights, our property, our employees or our assets. We might also use and disclose information to comply with a judicial proceeding, court order, or other legal process. Security We use appropriate administrative, technical, and physical security measures to protect customer data.  Your privacy-related rights If you are a consumer who has provided your personal information via this website, you might have the following rights, depending on where you reside: – Right to Know: You can request information about the personal information we have collected about you. – Right to Correct or Update: You can make changes to the personal information that we have collected from you or about you. – Right to Delete: You can request that we delete your personal information. – Right to Opt-Out: You can opt-out of the sale of your personal information under applicable privacy law – however, please be aware that Commify does not sell any personal information that its website visitors might submit. You can also manage your receipt of marketing communications by clicking on the “unsubscribe” link located at the bottom of Commify marketing emails. Please note that our customers cannot opt out of receiving transactional emails related to their account or the services they have purchased. – Right to Non-Discrimination: You will not be discriminated against for exercising any of these rights. How to exercise your privacy-related rights To exercise your rights, please contact us at [email protected] or in writing to Spryng B.V, Prinsengracht 739 -741, 1017 JX Amsterdam. You will be required to verify your identity by providing proof of your identity. We will respond to your request within 45 days. Changes to this privacy policy We may update this Privacy Policy from time to time. We will notify you of any material changes to this Privacy Policy and provide the opportunity to opt-out of having our personal information used for new purposes. Privacy policy for Australian residents  Commify is committed to providing quality services to you and this policy outlines our ongoing obligations to you in respect of how we manage your Personal Information. We have adopted the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (the Privacy Act). The APPs govern the way in which we collect, use, disclose, store, secure and dispose of your Personal Information. A copy of the Australian Privacy Principles may be obtained from the website of The Office of the Australian Information Commissioner at https://www.oaic.gov.au/. What is Personal Information and why do we collect it? Personal Information is information or an opinion that identifies an individual. Examples of Personal Information we collect includes names, addresses, email addresses, phone and facsimile numbers. This Personal Information is obtained in many ways including correspondence, by telephone and facsimile, by email, from your website, from media and publications, from other publicly available sources, from cookies and from third parties. We don’t guarantee website links or policy of authorised third parties. We collect your Personal Information for the primary purpose of providing our services to you, providing information to our clients and marketing. We may also use your Personal Information for secondary purposes closely related to the primary purpose, in circumstances where you would reasonably expect such use or disclosure. You may unsubscribe from our mailing/marketing lists at any time by contacting us in writing. When we collect Personal Information we will, where appropriate and where possible, explain to you why we are collecting the information and how we plan to use it. Sensitive Information Sensitive information is defined in the Privacy Act to include information or opinion about such things as an individual’s racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a trade union or other professional body, criminal record or health information. Sensitive information will be used by us only: •   For the primary purpose for which it was obtained •  For a secondary purpose that is directly related to the primary purpose •   With your consent; or where required or authorised by law. Third Parties Where reasonable and practicable to do so, we will collect your Personal Information only from you. However, in some circumstances we may be provided with information by third parties. In such a case we will take reasonable steps to ensure that you are made aware of the information provided to us by the third party. Disclosure of Personal Information Your Personal Information may be disclosed in a number of circumstances including the following: • Third parties where you consent to the use or disclosure; and •  Where required or authorised by law. Security of Personal Information Your Personal Information is stored in a manner that reasonably protects it from misuse and loss and from unauthorized access, modification or disclosure. When your Personal Information is no longer needed for the purpose for which it was obtained, we will take reasonable steps to destroy or permanently de-identify your Personal Information. However, most of the Personal Information is or will be stored in client files which will be kept by us for a minimum of 7 years. Access to your Personal Information You may access the Personal Information we hold about you and to update and/or correct it, subject to certain exceptions. If you wish to access your Personal Information, please contact us in writing. Commify will not charge any fee for your access request, but may charge an administrative fee for providing a copy of your Personal Information. In order to protect your Personal Information we may require identification from you before releasing the requested information. Maintaining the Quality of your Personal Information It is important to us that your Personal Information is up to date. We  will  take reasonable steps to make sure that your Personal Information is accurate, complete and up-to-date. If you find that the information we have is not up to date or is inaccurate, please advise us as soon as practicable so we can update our records and ensure we can continue to provide quality services to you. Policy Updates This Policy may change from time to time and is available on our website. Privacy Policy Complaints and Enquiries If you have any queries or complaints about our Privacy Policy, or the handling of your data, please contact us at: [email protected]  or in writing to:  Spryng B.V, Prinsengracht 739 -741, 1017 JX Amsterdam  You may be required to verify your identity by providing proof of your identity. We will aim to respond to your request within 30 days.  Policy created  June 2026		We may also disclose your data for the purposes of insurance, risk management, professional advice or any other aspect of legal claims, whether in court, out of court or in administrative proceedings, where required by law or to protect the vital interests of you or a third party.We will also share your Personal Data within the Commify Group, this includes Commify Italia SRL, Commify France SASU, Infomotiv SASU, Commify Netherlands Holdings BC, Spryng BV, Commify UK Limited, Esendex Australia Pty Ltd, Commify Iberia SL, Commify Esendex SRL, Commify Germany GmbH, Commify USA Holdings LLC, CDYNE Services LLC, Text Request LLC. Commify retains the Personal Data we collect only for as long as necessary to comply with essential services, such as complying with legal obligations, resolving disputes, and enforcing our agreements. Please contact us at [email protected] if you would like to know more about a retention period specific to your Personal Data. We may transfer or process your data outside of the UK and EU as set out in this section.  As some of the information you submit to us will be classified as Personal Data, you have certain rights under the GDPR and UK GDPR, which we summarise in this section. Please note that as we are a provider of business-to-business communications, some of the rights in this section may not apply to your Data. Your rights are:You have the right to know whether we hold your personal data and any additional information related to it.Requests for this information can be made vby emailing [email protected]. The first copy of this information will be free, a reasonable fee will be charged for additional copies.You can view Your Account Data and Transaction Data at:  app.spryng.nl or app.spryng.be and by logging into Your account.Any inaccurate or incomplete data we hold can be rectified by contacting support at [email protected] for users in the Netherlands and Belgium, or [email protected] for users in Germany. Alternatively you can contact our privacy team at [email protected] Under the GDPR and UK GDPR, you have the right to request that Your data be deleted, for example:We no longer need the data for the reason we collected it;Withdraw consent;You do not want us to process Your data;We are using Your data for direct marketing;We have unlawfully processed Your personal data.Exceptions to this right are also detailed in the GDPR and UK GDPR, this means that we do not have to delete your data if the processing is necessary for the exercise of the rights of freedom of expression and information, so we can comply with a legal obligation and for other aspects of any type of legal claim.You have the right to restrict the processing of your personal data if:The data is inaccurateProcessing is unlawful but you don’t want us to erase it;We no longer need the personal data, but you need it for any aspect of a legal claimYou have objected to data processing and we are verifying Your objection.In cases where processing has been restricted, we may continue to store your personal data, but we will only process it in these cases:With your consent;For any aspect of a legal claimFor reasons of important public interestYou may object to us processing your data on grounds relating to your own circumstances, but only if the lawful basis for the processing is:to perform a task that is carried out in the public interest or to exercise any official authority we have;for the purposes of our legitimate interests or the legitimate interest of a third party.If you object to the processing, we will suspend our processing activities, unless it is considered that legitimate reasons for the processing override your interests, rights and freedoms, or that the processing is for any aspect of a legal claim.You can object to our use of your personal data for direct marketing and profiling for direct marketing.You can change your communication preferences by contacting support at [email protected] for users in the Netherlands and Belgium, or [email protected] for users in Germany. Alternatively you can opt out of any communication you receive by clicking unsubscribe.If the lawful basis for the processing of your data is consent or the performance of a contract between you and us, including taking steps to conclude it and this processing is automated, you have the right to receive your personal data from us in a commonly used, machine-readable and structured format. This right does not apply when it affects the rights and freedoms of third parties.You may withdraw your consent at any time where we use it as the lawful basis for processing Your data. Processing before consent is withdrawn will remain lawful.You can withdraw your consent or make any other request related to your rights by contacting support at [email protected] for users in the Netherlands and Belgium, or [email protected] for users in Germany. Alternatively you can contact our privacy team at [email protected]