Privacy Policy
Last Updated: December 2024
Introduction
Spherix B.V. ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website spherix.world or use our services. We are the data controller for the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws.
By using our services or website, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our services.
Data Controller Information
Spherix B.V. is the data controller responsible for your personal data. Our contact details are:
Spherix B.V.
Nieuwstraat 45
4828 UH Breda
North Brabant, Netherlands
Registration Number: 58296014
VAT Number: NL879341506B01
Email: privacy@spherix.world
Phone: +31 108899893
Data Collection
The data we collect includes personal information that you voluntarily provide to us when you use our website, request our services, or communicate with us. This may include:
- Personal identifiers such as your name, email address, and phone number
- Business information including company name, job title, and business address
- Communication data from contact forms, emails, and phone calls
- Technical data including IP address, browser type, and device information
- Usage data about how you interact with our website and services
- Marketing preferences and communication history
We may also collect data automatically through cookies and similar technologies when you visit our website. For more information about our use of cookies, please see our Cookie Policy.
How We Use Your Data
We explain how we use your information for various legitimate business purposes. The use of your data is based on the following legal bases under GDPR:
Contractual Necessity
We use your data to provide our software development services, process payments, and fulfil our contractual obligations to you.
Legitimate Interests
We may use your data for business administration, customer support, improving our services, and marketing communications where we have a legitimate interest.
Legal Compliance
We may process your data to comply with legal obligations, such as tax requirements and regulatory compliance.
Consent
Where required by law, we will obtain your explicit consent before processing your data for specific purposes such as marketing communications.
Data Sharing and Disclosure
We do not sell, trade, or otherwise transfer your personal data to third parties without your consent, except as described in this policy. We may share your data with:
- Service providers who assist us in operating our business and serving our clients
- Professional advisors including lawyers, accountants, and auditors
- Regulatory authorities when required by law or to protect our legal rights
- Business partners with your explicit consent for specific projects or services
All third-party service providers are contractually bound to protect your data and use it only for the purposes we specify.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our retention periods are based on:
- The nature of the data and the purposes for which it was collected
- Legal and regulatory requirements
- Our legitimate business interests
- Your preferences and consent
When data is no longer needed, we will securely delete or anonymise it in accordance with our data retention schedule and applicable legal requirements.
Your Rights Under GDPR
As a data subject under GDPR, you have the following rights regarding your personal data:
Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication measures
- Employee training on data protection and security
- Incident response procedures for data breaches
While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but will notify you and relevant authorities of any data breaches as required by law.
International Data Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, including:
- Adequacy decisions by the European Commission
- Standard contractual clauses approved by the European Commission
- Binding corporate rules for intra-group transfers
- Certification schemes and codes of conduct
Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyse website usage. For detailed information about our use of cookies, including types of cookies, their purposes, and how to manage your preferences, please refer to our Cookie Policy.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending email notifications to registered users
- Displaying prominent notices on our website
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.
Contact Information
If you have questions about this Privacy Policy, want to exercise your rights, or need to contact us regarding data protection matters, please contact us using the following information:
Data Protection Officer:
Spherix B.V.
Nieuwstraat 45
4828 UH Breda
North Brabant, Netherlands
Email: privacy@spherix.world
Phone: +31 108899893
We will respond to your requests within 30 days as required by GDPR. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.
Supervisory Authority
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority). You can contact them at autoriteitpersoonsgegevens.nl or by phone at +31 70 888 8500.