Last updated: December 2024
This Privacy Policy explains how flattmfl B.V. ("we", "us", or "our") collects, uses, and protects your personal information when you use our services or visit our website. We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR).
flattmfl B.V. is the data controller for the personal data we process. Our company is registered in the Netherlands with registration number 50741829 and VAT number NL861904375B01. Our registered office is located at Parkweg 46, 9770 PF Groningen, Netherlands.
The data we collect includes personal information that you provide to us directly and information that is automatically collected when you use our services. This includes your name, email address, phone number, company information, IP address, browser type, device information, and usage data. We collect this information when you contact us, use our platform services, subscribe to our communications, or visit our website. The data we collect is necessary for providing our SaaS platform services and communicating with you about our offerings.
We explain how we use your information for various legitimate business purposes. We use of your data includes providing and maintaining our SaaS platform services, processing your requests and communications, sending you important service updates and notifications, improving our services and website functionality, complying with legal obligations, and protecting our rights and interests. How we use your information is always based on a valid legal basis under GDPR, including contract performance, legitimate interests, legal compliance, or your explicit consent.
Under GDPR, we process your personal data based on the following legal grounds: (a) Contract performance - when processing is necessary to perform our services; (b) Legitimate interests - for business operations, security, and service improvement; (c) Legal compliance - to meet our legal and regulatory obligations; (d) Consent - where you have given explicit consent for specific processing activities. You have the right to withdraw consent at any time where we rely on consent as the legal basis.
We do not sell, trade, or rent your personal information to third parties. We may share your information with trusted service providers who assist us in operating our business and providing services to you, provided they agree to keep this information confidential. We may also disclose your information when required by law, to protect our rights, or in connection with a business transaction such as a merger or acquisition.
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal requirements. Contact information and communications are typically retained for 3 years after our last interaction. Service data is retained for the duration of our business relationship plus 7 years for legal compliance. Website analytics data is retained for 26 months. Marketing data is retained until you unsubscribe or withdraw consent. We regularly review and delete data that is no longer necessary.
Under GDPR, you have several rights regarding your personal data: (a) Right of access - to obtain a copy of your personal data; (b) Right to rectification - to correct inaccurate or incomplete data; (c) Right to erasure - to request deletion of your data under certain circumstances; (d) Right to restrict processing - to limit how we use your data; (e) Right to data portability - to receive your data in a portable format; (f) Right to object - to object to processing based on legitimate interests; (g) Right to withdraw consent - where processing is based on consent. To exercise these rights, please contact us using the contact information provided below.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include encryption, access controls, regular security assessments, and staff training. While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure.
As we are based in the Netherlands (EU), your data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or other legally recognised transfer mechanisms to protect your data.
Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyse website usage. For detailed information about our use of cookies, please refer to our Cookie Policy. You can control cookie settings through your browser preferences.
Our services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete that information promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.
If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please contact us at:
flattmfl B.V.
Data Protection Officer
Parkweg 46, 9770 PF Groningen, Netherlands
Email: privacy@flattmfl.life
Phone: +31 701176887
If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the relevant supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority). You can contact them at autoriteitpersoonsgegevens.nl.