Privacy Policy Ikigai Nexus

Effective Date: 01-02-2025
Last Updated: 01-02-2025

At Ikigai Nexus, we value your privacy and are committed to protecting your personal data. This privacy policy explains what data we collect, how we process it, and your rights regarding your data, in compliance with the General Data Protection Regulation (GDPR).

1. Data Controller

Ikigai Nexus, located at Amersfoort, the Netherlands, is responsible for the processing of personal data as described in this policy. For questions, please contact gdpr@ikigai-it.nl.

2. What data do we collect?

We may collect and process the following data:

• Personal identification data: name, email address, phone number.
• Technical data: IP addresses, website usage.
• Transaction data: order details.
• Other data: information provided via contact forms or accounts.

Data is collected through our website, cookies, subscriptions, accounts, and communication channels such as WhatsApp and Telegram.

3. Why do we process data?

We process your data for the following purposes:

• Providing our services (professional services and SaaS solutions).
• Customer service and communication.
• Marketing and newsletters.
• Invoicing and administration.
• Analyzing website and service usage (for optimization and statistics).

Processing is based on:

• Consent (e.g., newsletter subscriptions).
• Contractual obligation (to deliver services).
• Legitimate interest (such as service improvement).

4. Cookies and Tracking

We use cookies and tracking tools, including:

• Functional cookies: to ensure the proper functioning of the website.
• Analytical cookies: to collect user statistics and improve user experience.

On your first visit, we inform you about our use of cookies. You can manage cookies via your browser settings or through our website.

5. Data sharing with third parties

We only share your data with third parties when necessary:

• Hosting providers: Netlify, Supabase, and Azure for cloud storage.
• Payment services: Mollie for secure payments and invoicing.

Some data may be transferred outside the EU, with appropriate safeguards such as standard contractual clauses in place.

6. How long do we retain data?

We retain your data:

• As long as necessary to provide the requested service.
• Up to five years after the service ends.
• In accordance with legal retention periods.

7. How do we protect your data?

We implement appropriate security measures, including:

• Encryption of data in transit.
• Access limited to authorized personnel using MFA (multi-factor authentication).
• Adhering to the principle of least privilege.

8. Your rights

You have the following rights regarding your personal data:

• Right of access: request a copy of your data.
• Right to rectification: correct inaccurate data.
• Right to erasure: have data deleted where possible.
• Right to restrict processing: adjust how we process your data.
• Right to data portability: receive data in a transferable format.
• Right to object: object to processing for specific purposes.

To exercise these rights, please contact gdpr@ikigai-it.nl. We will respond within 30 days.

9. Complaints

If you have complaints about how we process your data, please contact us at gdpr@ikigai-it.nl. You may also file a complaint with the supervisory authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

10. Changes to this privacy policy

We reserve the right to update this privacy policy. We encourage you to review it periodically for updates. Significant changes will be communicated via our website.

For additional questions or comments, please contact us at gdpr@ikigai-it.nl.