Privacy & Cookie Policy

Last updated: 14 November 2025

This Privacy & Cookie Policy explains how we collect, use, and protect your personal information when you use this website. We are committed to safeguarding your privacy and complying with applicable privacy laws, including the EU GDPR, ePrivacy Directive, and relevant US state privacy laws (e.g., CCPA/CPRA, CPA, VCDPA).

By using this website, you agree to the practices described in this policy.

1. Who we are

VAT360 B.V.

Almere, The Netherlands
[email protected]

We are the controller of the personal data processed via this website.

2. What Personal Data We Collect

We collect only the minimum personal information necessary to operate the website and provide services. This may include:

2.1 Information You Provide Voluntarily

• When you contact us via forms or email:
• Name
• Email address
• Any message/content you submit
• If we offer subscriptions, sign-ups, or downloads:
• Email address
• Name
• Any required account details

2.2 Information Collected Automatically

We collect limited technical and usage data to make the website function properly, such as:

• IP address (short-term, for security/logs)
• Browser type and settings
• Device information
• Date and time of visits
• Pages viewed

We do not use analytics tools, advertising technologies, tracking pixels, or third-party marketing cookies.

3. How We Use Your Information

We use personal data only for the following legitimate purposes:

• To operate and maintain the website
• To respond to your inquiries and messages
• To provide requested information or services
• To ensure security, detect fraud, and prevent misuse
• To comply with legal obligations

We do not sell, rent, share, or use your data for advertising, profiling, or behavioral tracking.

4. Cookies

4.1 What Are Cookies?

Cookies are small text files stored on your device to help the website function.

4.2 Types of Cookies We Use

We use only strictly necessary cookies, such as:

• Session cookies: to maintain website functionality
• Security cookies: to protect against malicious activity
• Preference cookies: only if required to display the website properly

We do NOT use:

• Analytics cookies
• Advertising or marketing cookies
• Social media tracking
• Third-party behavioral tracking technologies

4.3 Why Consent Is Not Required

Under GDPR and the ePrivacy Directive, strictly necessary cookies do not require prior consent.
We provide this notice for transparency.

You may disable cookies in your browser settings, but the site may not work correctly.

5. Legal Basis for Processing (EU/EEA Visitors)

Under the EU General Data Protection Regulation (GDPR), we process personal data based on:

• Article 6(1)(b) – to perform a contract or provide requested services
• Article 6(1)(f) – legitimate interests (e.g., security, website functionality)
• Article 6(1)(c) – compliance with legal obligations

We do not rely on consent unless explicitly indicated.

6. Your Rights (EU/EEA Visitors)

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion (“right to be forgotten”)
• Restrict or object to processing
• Request data portability
• Submit complaints to your local data protection authority

To exercise your rights, contact: [email protected]

7. Your Rights (US Visitors)

Depending on your state (e.g., California, Colorado, Virginia), you may have rights such as:

• Right to know what personal data is collected
• Right to request deletion
• Right to correct personal data
• Right to opt out of “sale” or “sharing” of data
• Right to non-discrimination

We do not sell or share personal data for targeted advertising.

You may exercise US privacy rights by contacting: [email protected]

8. Data Sharing & Third Parties

We do not sell or share personal information for advertising or analytics.

We may share data only with:

• Service providers who support website hosting, email delivery, or security
• Legal authorities, if required by law
• Professional advisors, if necessary for compliance

All service providers are required to protect your data.

9. International Transfers

If we store or process data outside your country (e.g., in the US or EU), we take appropriate safeguards, such as:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions
• Contractual protections

10. Data Retention

We keep your personal data only as long as necessary for:

• providing requested services
• fulfilling legal obligations
• maintaining security and business records

Emails and contact form messages are typically kept no longer than necessary.

11. Security

We use reasonable technical and organizational measures to protect your personal data, including:

• Secure hosting
• Encrypted connections (HTTPS)
• Access controls
• Regular security updates

No system is fully secure, but we work to protect your information.

12. Links to Other Websites

This website may contain external links. We are not responsible for the privacy or cookie practices of third-party sites.

13. Changes to This Policy

We may update this policy occasionally. The latest version will always be posted on this page with the updated date.

14. Contact Us

If you have questions about this Privacy & Cookie Policy or your data rights, contact:

VAT360 B.V.
Email: [email protected]