Our privacy and cookie statement in brief

When processing personal data, we comply with the GDPR. This means that we:

• Clearly define our purposes before we process your personal data, via this privacy and cookie statement.
• Store as little personal data as possible and only the information necessary for our purposes.
• Explicitly ask for your consent to process your personal data, if consent is required.
• Take necessary security measures to protect your personal data. We also impose these obligations on parties who process personal data for us.
• Respect your rights, such as the right to access, correct, or delete your personal data processed by us.

Processing of Personal Data

Shock Media B.V. processes your personal data because you use our services and/or because you provide this data to us. Below is an overview of the personal data we may process:

• First and last name.
• Phone number.
• Email address.
• Gender.
• IP address.
• Data about your activities on our online environments.
• Internet browser and device type.
• Payment details.
• Audio recordings of your phone conversations with us.
• Information you provide us in your CV or cover letter when applying for a job.
• Other personal data you actively provide in correspondence and telephone contact.

Purpose and legal basis

Shock Media B.V. processes the above personal data for the following purposes:

• To be able to provide our services (or products) to you.
• Processing your payment(s).
• To be able to process your job application.
• Sending our newsletter and/or promotional communications.
• Answering your questions or providing information.
• Informing you about maintenance or disruptions concerning our services.
• To solve disruptions and detect and block digital attacks.
• To call or email you if this is necessary to carry out our services.
• To inform you of changes to our services and products.
• To give you the opportunity to create and manage an account.
• To register and facilitate your participation in meetings.
• To verify whether we are dealing with authorized persons.
• To process (telephone) orders and perform quality checks.
• Shock Media B.V. analyzes your behavior on our online environments in order to improve them and tailor the range of products and services to your preferences.
• Shock Media B.V. also processes personal data if we are legally obliged to do so, such as data we need for our tax return.

Special personal data

Shock Media B.V. does not intend to collect special or sensitive data about individuals, unless this is necessary for specific purposes and explicit consent has been given. If you are convinced that we have collected special personal data without that consent, please contact us via trustcenter@shockmedia.nl, and we will delete this information.

Data about minors

Shock Media B.V. does not intend to collect data about persons under the age of 16. If this does occur in exceptional cases, it will only happen with the consent of parents or guardians. However, we cannot check whether a website visitor or caller is 16 years or older. We therefore advise parents to be involved in their children’s (online) activities to prevent data about children from being collected without parental consent. If you are convinced that we have collected personal data about a minor without such consent, please contact us via trustcenter@shockmedia.nl, and we will delete this information.

Retention period of data

Shock Media B.V. has established reasonable retention periods for all purposes for which we collect personal data. We will therefore not retain your data longer than necessary or required. In some cases, we need to keep data longer to comply with our legal obligations. If you believe we no longer need your data, you can request deletion via trustcenter@shockmedia.nl.

Sharing data with third parties

We never sell your data and only share your personal data with third parties when there is a specific purpose for it and it is permitted under current law. It is possible that we provide your personal data to third parties because these parties perform certain services for us or because we collaborate with them. The parties who process personal data on our or your behalf include:

• Slack (https://slack.com/trust) – Communication purposes
• Prévider (https://previder.nl/privacy-statement) – Datacenter facilities
• Voys (https://www.voys.nl/privacy-en-toegankelijkheid/) – Communication purposes
• Microsoft (https://servicetrust.microsoft.com/) – Communication purposes / Public cloud
• Cloudflare (https://www.cloudflare.com/trust-hub/) – Anti-DDOS & CDN
• AWS (https://aws.amazon.com/compliance/) – Public cloud
• Your.Online – Internal management and cooperation
• Business units of Your.Online – Internal management and cooperation

For these (sub)processors, we only share your data if it is necessary for the execution of our services, or because you have explicitly chosen a specific type of service. For example, our Managed hosting services are by default offered from Dutch data centers, unless you expressly choose service based on a Public Cloud Service or CDN, which may involve a third party from another geographical location or where the type of service requires data to be shared.

In order to provide our services, we may provide your personal data to parties located outside the European Economic Area (EEA) or who process data there. We only do this if there is an appropriate level of protection for the processing of personal data. For example, we use the European Commission’s model agreements or make clear agreements about the treatment and protection of personal data.

The security of personal data

Shock Media B.V. takes the protection of your data seriously and takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure, and unauthorized alteration. To demonstrate this, we are also ISO 27001 and NEN 7510 certified. This means we meet strict requirements regarding information security. If you believe your data is not properly secured or there are indications of misuse, please contact our customer service or via trustcenter@shockmedia.nl.

Cookies

Shock Media B.V. uses functional and analytical cookies on its online environments. A cookie is a small text file that is stored in your browser on your computer, tablet, or smartphone during your first visit to a website. Shock Media B.V. uses cookies with purely technical functionality. These ensure the website operates properly, and for instance, remember your preference settings. These cookies are also used to make our online environments work well and to optimize them. We do not use tracking cookies to follow you across different websites and applications.

You can disable cookies by configuring your browser to not store cookies. Additionally, you can also delete any information previously saved via your browser settings. No cookies from third parties are placed on our online environments.

Access, modify or delete data

You have the right to access, correct, or delete your personal data. In addition, you have the right to withdraw any consent to data processing or to object to the processing of your personal data by Shock Media B.V., and you have the right to data portability. You can send a request for access, correction, deletion, data transfer of your personal data, or a request to withdraw your consent or objection to the processing of your personal data to trustcenter@shockmedia.nl. If you are a customer with us, you can adjust your data yourself via your customer environment at my.shockmedia.nl.

To be sure that the request for access was made by you, we will ask you to make an appointment to identify yourself at our office in Almelo. We ask that you do not send a copy of your ID unsolicited with your request. We will respond to your request as soon as possible, but within four weeks.

Changes to this privacy and cookie statement

When our services change, it may be necessary to adjust our privacy and cookie statement. Please consult this privacy and cookie statement regularly for the most up-to-date information.

Questions or filing a complaint

If you have questions or wish to file a complaint about the use of your personal data, you can contact us using the contact details in this privacy and cookie statement. We handle every question and complaint internally and will communicate accordingly. If you feel that we are not helping you appropriately, you have the right to file a complaint with the supervisory authority. This is called the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).