BackPrivacy and cookie notice
This Privacy Notice (the “Notice”) explains how we, Index Innovation B.V., situated at Weesperplein 4a, 1018 XA Amsterdam and acting as GMCI (“GMCI”, “us” or “we”), collect and use your personal data when providing and maintaining our website and any associated content, information, features and/or services (together the “Services”) we may provide to you, unless we have entered into a separate agreement. This Notice also informs you about how we protect your personal data and the rights and options you have to control your data.
We advise you to read this Notice carefully and to consult it on a regular basis when you use our Services, as it may be necessary for us to amend this Notice from time to time.
- The personal data we collect
When we talk about data or personal data in this Notice, we refer to all data that can be directly or indirectly traced back to you as an individual. Depending on how you use our Services, we collect and process data that you ask us to process or data that we otherwise collect. The categories of data we process are:
Contact Data, meaning the data you provide and which we automatically collect when communicating with u. This includes: your name, email address, telephone number, country of residence, the company you work for and any other business details you may provide, as well as other information that may voluntarily be provided by you or known to us.
Technical data, meaning data we automatically collect through your use of our Services. This includes device and network connection information when accessing our Services, such as browser type and setting, device type and settings, system language, operating system and any other information provided by your browser or your use of our Services (including which pages you visit and the links you click on). Note: some of the Technical Data is collected through cookies, pixels and/or other technologies (together: “Cookies”). - Our grounds for processing your personal data
Purpose of processingCategories of personal dataCorresponding legal basisProviding certain Services to youContact DataThis is necessary for us to fulfil our contract with you to provide certain agreed ServicesDeveloping and improving our ServicesTechnical DataIt is our legitimate business interest to develop and improve the delivery of our Services (including by understanding how you use the Services) and to develop new Services or productsTo protect establish, exercise or defend our rights, to defend against lawsuits and to detect and prevent crime and fraud within our ServicesContact Data
Technical DataIt is our legitimate business interest to protect our rights and to detect, investigate and prevent crime and fraud within or related to our ServicesTo comply with our legal obligations, for instance our fiscal, bookkeeping and tax obligationsContact Data
Technical DataThis processing is necessary for our compliance with our legal obligationsProviding you with marketing materials for the promotion of our ServicesContact DataIt is our legitimate business interest to market our activities and promote the success of our Services
Where required by applicable laws we will ask your consent - Cookies
We may use Cookies to store and access data on your device to help our website work. The below table explains their purpose, how long they last, and who else can access their data. Where necessary under applicable laws we obtain your consent to use these Cookies on your device.
Cookie nameFunctionalityDurationPurposeNecessary CookiesEssential website functionsSession durationTo ensure proper website operationPerformance CookiesCollect website performance data1 yearTo analyse and improve website performanceFunctionality CookiesStore user preferences6 monthsTo remember user choices and settingsTargeting/Advertising CookiesDeliver personalised ads6 monthsTo display relevant advertisements - Sharing of your personal data
We only share your personal data with third parties where relevant and necessary, for example where we use third-party service providers to support us in providing the Services, payment providers for executing payments relating to our Services, public authorities, fiscal authorities and legal advisers. - Where we host your personal data and international data transfers
We will process your personal data within the European Economic Area as much as possible. In the event we need to transfer your data outside of the EEA, we will ensure this is done in accordance with applicable laws and regulations and that the protection of your personal data is adequately safeguarded. - How we protect and store your personal data
We have implemented physical, technical and organizational security measures to protect your personal data, in accordance with applicable laws. These measures are aimed at ensuring the integrity and confidentiality of your personal data, for instance by ensuring that only authorized employees have access to your personal data, and to protect it against unlawful or unauthorized destruction, loss, alteration, use or disclosure, or access. We evaluate and update these measures on a regular basis. Please be aware that no information system can be 100% secure. This means that we cannot guarantee the absolute security or availability of your personal data.
We will retain your personal data for the duration of your use of our Services, unless a shorter or longer retention period is required under applicable laws, or the data is no longer necessary for the purposes for which the data was obtained. Once you no longer interact with our Services, we will retain your personal data for the period of time that enables us to:- fulfil our legal obligations, including legal retention periods;
- initiate, investigate or defend against legal claims;
- address your questions, requests or complaints; and
- keep our records for analysis and audit purposes.
- Exercising your rights
We respect the rights granted to you under applicable data protection laws. Depending on your location, these may include the right to access your personal data that we hold about you, to rectify or erase certain personal data, to restrict processing of your personal data and to get an electronic copy of your personal data for purposes of transmitting it to another company. These rights may be subject to certain limitations or restrictions as allowed or imposed by applicable laws.
Where we rely on our legitimate interests for processing your personal data, you have the right to object to such processing (either wholly or in part). For instance, depending on your country you may have the right to opt-out of marketing communications.
Where we rely on your consent for processing your personal data, you have the right to withdraw your consent at any time. You are also entitled to file a complaint with your local data protection authority.
If you have any questions relating to the processing of your personal data, or to exercise your rights, please contact us by sending an email to info@gmci.co.
Note: Our Services may contain links to third party services or websites. We are not responsible for the way in which these third parties handle your personal data. We advise you to read the privacy notice of the third party when you make use of their service or visit their website in order to understand how this third party collects and uses your personal data.
