Privacy Policy

Last updated: 15 January 2026

Introduction

CrystalSummarium B.V. ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website and services. We are the data controller for the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data We Collect

We collect various types of information in connection with the services we provide. The data collection includes both information you provide directly and information we gather automatically when you use our website and services.

Information you provide to us: This includes personal details such as your name, email address, phone number, company information, and any messages or enquiries you send through our contact forms. We also collect information when you subscribe to our newsletters or request our services.

Information we collect automatically: When you visit our website, we automatically collect certain information including your IP address, browser type, operating system, referring website, pages viewed, and the dates and times of your visits. This technical information helps us improve our website functionality and user experience.

How We Use Your Information

We use the data we collect for various legitimate business purposes. How we use your information depends on the services you use and your relationship with us.

We use of your data includes providing and improving our services, responding to your enquiries and support requests, sending you relevant information about our services, processing transactions, and ensuring the security and functionality of our website. We also use your information to comply with legal obligations and protect our legitimate business interests.

  • To provide, maintain, and improve our digital solutions and services
  • To respond to your enquiries, support requests, and provide customer service
  • To process transactions and manage your account
  • To send you important information about our services, including updates and security notices
  • To personalise your experience and provide relevant content
  • To analyse website usage and improve our online presence
  • To comply with legal obligations and protect our legitimate interests

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our use of cookies, please refer to our Cookie Policy.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds: your consent (for marketing communications and non-essential cookies), performance of a contract (when providing services), legitimate interests (for business operations, security, and improvements), and legal obligations (for compliance with applicable laws). You have the right to withdraw consent at any time where we rely on consent as the legal basis.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information with trusted service providers who assist us in operating our website and conducting our business, provided they agree to keep your information confidential. We may also disclose your information when required by law or to protect our rights, property, or safety.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The specific retention periods depend on the type of data and the purpose for which it was collected. We regularly review our data retention practices to ensure compliance with applicable regulations.

Your Rights

Under GDPR and other applicable data protection laws, you have several important rights regarding your personal data. These your rights include the ability to control how your information is processed and used.

  • Right of access: You can request a copy of the personal data we hold about you
  • Right to rectification: You can ask us to correct inaccurate or incomplete information
  • Right to erasure: You can request deletion of your personal data in certain circumstances
  • Right to restrict processing: You can ask us to limit how we use your data
  • Right to data portability: You can request your data in a portable format
  • Right to object: You can object to certain types of processing
  • Right to withdraw consent: You can withdraw consent where we rely on it

Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure servers, access controls, and regular security assessments. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

International Data Transfers

As we operate primarily within the European Union, your data is generally processed within the EU/EEA. If we need to transfer your data outside the EU/EEA, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses, to protect your information in accordance with GDPR requirements.

Children's Privacy

Our services are not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please don't hesitate to contact us using the information below.

Data Controller

Company: CrystalSummarium B.V.

Address: Lindelaan 29, 2539 BS The Hague, Netherlands

Email: [email protected]

Phone: +31 709995965

Registration: NL91837464

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe we have processed your personal data in violation of applicable data protection laws. In the Netherlands, you can contact the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).