Privacy notice

This notice covers visits to our corporate website, reloungeclub.nl, and enquiries made using the contact details listed there. It does not cover use of the reLounge app or the processing of data in client projects.

Who is responsible

The controller is reLounge B.V., Hereplein 4, 9711 GA Groningen, Netherlands. For privacy questions, email [email protected] or call +31 50 208 4002.

What happens when you visit

We use Cloudflare Pages, provided by Cloudflare, Inc. (USA), to deliver this website and protect it against attacks. Data processed include your IP address, the time and destination of the request, and technical information about your browser, connection and any errors. Without the information needed to establish the connection, we cannot display the requested page. We rely on our legitimate interest in running a secure, reliable website (Article 6(1)(f) GDPR).

If your browser supports Network Error Logging, it may send Cloudflare technical connection reports, such as the affected address and type of error. Cloudflare says that within this reporting system it uses the client IP address only while processing the individual report and does not log it. This does not apply to other hosting or security logs.

Cookies, analytics and embedded content

We do not use advertising or analytics cookies or create visitor profiles. Fonts and images are served with the website. There is no contact form, login or embedded content from third-party platforms.

On reloungeclub.nl, Cloudflare protects the email address shown on screen against automated collection. A small script makes the address readable in your browser.

When you email or call us

We process your contact details, the substance of your enquiry and, where relevant, details of the organisation you represent. When your enquiry concerns a contract with you personally or steps you ask us to take before entering into one, we rely on Article 6(1)(b) GDPR. For other enquiries, including those made on behalf of a company, we rely on our legitimate interest in responding to business enquiries (Article 6(1)(f) GDPR). Providing details is voluntary. Without a means of contacting you, we cannot reply. Please do not send patient records or other health data to our general email address.

Who receives data and where it is processed

Depending on how you contact us, the people handling your enquiry and our email and telephony providers receive the data they need. Cloudflare and its subprocessors provide hosting. Cloudflare may process data outside the European Economic Area, particularly in the United States. The European Commission’s adequacy decision applies to transfers to Cloudflare, Inc. covered by its certification under the EU–US Data Privacy Framework. For other transfers not covered by an adequacy decision, Cloudflare’s Data Processing Addendum provides for EU Standard Contractual Clauses. You can ask us for a copy of the applicable safeguards.

How long we keep data

The retention of technical logs depends on how long entries are needed to detect patterns of attack or investigate specific faults. Once an incident has been resolved and evidence is no longer needed, that purpose ends. We delete enquiries once we have answered them and no follow-up is outstanding. If a contract results, we retain the necessary records in line with applicable legal obligations (Article 6(1)(c) GDPR). In a specific legal dispute, we may retain necessary evidence until the dispute has been finally resolved (Article 6(1)(f) GDPR).

Your rights and how to complain

Subject to the applicable conditions, you can request access, rectification, erasure, restriction and data portability. Contact us at [email protected]. We do not use this website to make solely automated decisions that have legal or similarly significant effects on you. You may also complain to a data protection authority, particularly where you normally live or work, or where you believe an infringement occurred. The Dutch authority is the Autoriteit Persoonsgegevens.

Your right to object

When processing is based on our legitimate interests, you may object at any time on grounds relating to your particular situation. We will stop unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or we need the data for legal claims.