Privacy Policy

Introduction

CorePlatinum B.V. ("we", "our", or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, and protect personal data we collect from visitors to our website and clients who use our commercial real estate services.

Data Controller Information

The data controller for your personal information is:

Data Collection

The data we collect includes personal information that you voluntarily provide to us and information automatically collected when you use our website. We collect the following types of personal data:

• Contact Information: Name, email address, phone number, postal address
• Professional Information: Company name, job title, business requirements
• Communication Data: Messages, enquiries, and correspondence with our team
• Website Usage Data: IP address, browser type, device information, pages visited, time spent on site
• Cookie Data: Information collected through cookies and similar technologies

How We Use Your Information

We use of your data for the following purposes based on legitimate business interests and legal obligations:

• Providing commercial real estate services and responding to your enquiries
• Managing client relationships and delivering contracted services
• Communicating about our services, updates, and relevant industry information
• Improving our website functionality and user experience
• Complying with legal and regulatory requirements
• Protecting our business interests and preventing fraud

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Legitimate Interest: For business communications, service improvement, and client relationship management
• Contract Performance: To fulfil our contractual obligations when providing services
• Legal Obligation: To comply with applicable laws and regulations
• Consent: For marketing communications and non-essential cookies (where required)

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Data Sharing and Third Parties

We may share your personal data with trusted third parties in the following circumstances:

• Service providers who assist with website hosting, analytics, and business operations
• Professional advisers including lawyers, accountants, and consultants
• Regulatory authorities when required by law
• Business partners for joint service delivery (with your consent)

We ensure that all third parties maintain appropriate data protection standards and use your information only as necessary to provide their services.

Data Retention

We retain personal data for as long as necessary to fulfil the purposes outlined in this policy and to comply with legal obligations. Our data retention periods are:

• Client Data: 7 years after the end of the business relationship (as required by Dutch law)
• Website Analytics: 26 months (Google Analytics default retention)
• Marketing Data: Until consent is withdrawn or 3 years of inactivity
• Legal Documents: As required by applicable laws and regulations

Your Rights

Under GDPR and Dutch privacy law, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Request transfer of your data to another organisation
• Right to Object: Object to processing based on legitimate interests or for marketing
• Right to Withdraw Consent: Withdraw consent for processing where applicable

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include secure hosting, encryption, access controls, and regular security assessments.

International Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) where our service providers operate. We ensure that such transfers are protected by appropriate safeguards, including adequacy decisions or standard contractual clauses approved by the European Commission.

Children's Privacy

Our services are not directed to individuals under the age of 16, and we do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete such information promptly.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or business operations. We will notify you of any material changes by posting the updated policy on our website and updating the "last updated" date.

Contact Information

If you have questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out using the following contact information:

Supervisory Authority

If you believe we have not handled your personal data in accordance with this policy or applicable law, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.