Last updated 9. December 2024
We respect your privacy and private life, but sometimes we need your personal data. This Policy explains how expx collects and uses personal information (also “PI”) from individuals who use the expx website, in person, over the phone, and other services offered by expx (collectively “Services”). This Policy also details our PI sharing practices, the steps expx takes to protect your PI, and your individual rights regarding your PI.
This Charter concerns our collection and processing of personal data on the expx.nl website (“Websites”).
In accordance with the General Data Protection Regulation (“GDPR” as may be amended from time to time), Expx B.V. is the data controller. In this Policy, unless otherwise stated, references to “we”, “us”, or “our” collectively refer to Expx B.V., registered in The Netherlands under company number 70364338, with registered office at Schiedamse Vest 154, 3011 BH Rotterdam, The Netherlands.
If you're here to change your Cookie Settings, click here.
Personal Data
To offer our Services we process personal data. "Personal data" means any information relating to an identified or identifiable natural person as defined in the Relevant Legislation.
We can store your data at various moments, for example when you visit our Websites, create an account via our Websites, use our Services, or when you contact us. We are allowed to process your data as we ask your permission via this privacy policy. We will not process your data without your consent, unless we are legally obliged to do so.
What data do we collect?
expx collects personal data from and about you when you use our Services. This data helps us provide you with the most useful information and a better browsing experience. We may use the data you share on our Websites or Services to personalise your experience, respond to your inquiries, contact or communicate with you as needed, troubleshoot or improve the Services, or protect the security or integrity of our business. If you provide us with your personal data in connection with the Services, we will process this information with your consent.
To use our Websites and Services, we need the following data:
Your e-mail address
Your IP-address
We can also store the following non-personal data if you use our Website:
The type of your browser
The operating system that you use
The internet service provider
We will only use your personal data for the purposes listed above or any other purpose that is connected thereto. This way, your data will never be used by us in an unexpected way.
How do we use your personal data?
We may use or disclose the personal data we collect for one or more business purposes:
To fulfil or respond to the reason you provided the data. For example, if you share your name and contact information to resolve a problem with a product, we will use your personal data to respond to your question.
In order to provide, support, personalise, develop, and improve our website, products, and services.
In order to create, maintain, personalise, and secure your accounts with us.
To provide you with support and respond to your requests, including reviewing and responding to your concerns and monitoring and improving our responses.
To personalise your experience on our website and to deliver content and product and service offerings tailored to your interests, including targeted offers and ads on our websites, third-party sites, and via email or text message (with your consent, where required by law).
To help safeguard the safety, security and integrity of our websites, products and services, databases, and other technology resources and activities.
To test, study, analyse and develop products, including developing and improving our websites, products, and services.
In order to provide you with the information, products, and services you request from us.
To notify you by email and other notices about our products and services, or events and news, which may be of interest to you.
In order to carry out our obligations and enforce our rights arising from any contracts between you and us, including for billing and collection purposes.
As described at the time of collecting your personal data.
In order to evaluate or effect a merger, divestiture, restructuring, reorganisation, dissolution, or other sale or transfer of all or a portion of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, where personal data held by us is among the assets transferred.
We will not collect additional categories of personal data or use the collected personal data for materially different, unrelated, or incompatible purposes without notifying you.
Do we disclose your personal data?
We may disclose personal data to third parties, service providers, or data controllers, including web hosts, payment processors, ad networks, or analytics companies. The data we share may include what you provide to us and what we collect about you as described above and may include Personal Data. If we engage third parties, service providers, or data controllers to perform services in connection with the Services, we require that they protect your personal data at least as well as we do.
We may also share personal data to respond to a legitimate law enforcement request, to enforce our contracts or property rights, or as otherwise required by law.
The data we collect may also be transferred in the event of a sale or merger of the company or any other division or business sector of the company to which the data relates.
Finally, we may collect or share anonymised, aggregated, or de-identified data to develop consumer profiles, perform similar analyses, or for marketing purposes.
How do we protect and secure your personal data?
We take the protection of your personal data very seriously. We use all commercially reasonable means to protect the confidentiality and integrity of your personal data collected by our Services, including TLS/SSL for data in transit. You can verify this by looking for the 'lock' icon (🔒) in your browser's address bar. We take the following measures to protect your personal data:
Encryption of digital files that contain personal data
Secure network connections with Secure SocketLayer (SSL) technology or a technology that is similar to SSL
The access to the data is limited to the persons that need the data
The access of the data is secured with two-step verification
We value the responsible disclosure of potential cybersecurity vulnerabilities. If you are a cybersecurity researcher and believe you have found a vulnerability on our website or any other service, please submit your report to info@expx.nl. Please include sufficient details in your report, such as the services affected, steps to reproduce the vulnerability, and any relevant proof of concept, screenshots, or logs.
Your Privacy Choices and Consent Preferences
EXPX strives to maintain transparent data privacy practices. No matter where you live, we give you choices about how your personal data is collected and used.
Cookies, trackers, web beacons, and similar technologies
A cookie is a small text file that a website – when visited by a user – asks your browser to save on your device in order to remember information about you, such as your language preference or login information. We place these cookies and they are called first-party cookies. We also use third-party cookies – which are cookies from a domain other than the domain of the website you are visiting – in connection with our advertising and marketing activities.
You can set your browser to block some or all cookies used by this website. We respect the Do Not Track and Global Privacy Control signals sent by your browser (“browser signals”).
To view or manage your preferences regarding cookies, trackers, web beacons and similar technologies, click here: Cookie Settings .Unsubscribe from marketing communications
You may opt out of expx notifications at any time by clicking “Unsubscribe” at the bottom of each message or by contacting us as described at the end of this document.
There are limits to what we can stop or eliminate. You may not opt out of communications for things like account verification, confirmations and reminders, changes and updates to features of the Services, or technical or security notifications.How can I exercise my individual rights?
To exercise your individual rights (including your right to access and portability, deletion, rectification, withdrawal, and recourse) by sending an email to info@expx.nl.
You can only make a consumer verification request twice within a 12-month period. A verifiable consumer request must:
Provide sufficient information that allows us to reasonably verify that you are the person from whom we collected personal data or an authorised representative. For example:
If you provide an email address for verification, we will send a verification email to the address you provided for confirmation.
If you only provide a phone number for verification, we may call the number provided and request additional information we have on file for verification.
If you provide only a postal address, we may send a letter to the address you provided with information on how to contact our response team for verification.
Describe your request in enough detail so that we can properly understand, evaluate and respond to it.
We will respond to your request within the time limits provided by law once we have validated your request. If we require more time, you will be informed of the reason and the additional time.
You may file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), if you are under the impression that we process your data unlawfully.
How long do we store your data?
Unless otherwise stated, we retain your personal data for as long as necessary to fulfil the related purposes listed above.
Transfer
We will only process your data within the European Union. We will only process your data outside of the European Union if the country has an effective protection level for your data.
We will never transfer your data to other countries or other parties than described above.
Modifications to this privacy policy
We reserve the right to update this Policy. We will not restrict your rights under this Policy without your consent. If we update this Policy, we will post an updated version here. Please refer to the “Last Updated” date above to ensure that you are reviewing the latest version of this Policy. We encourage you to review this Policy periodically.
How to contact us?
expx welcomes your questions, comments, and concerns about our privacy practices or any other aspect of our business. You can contact us by email at info@expx.nl or by mail at the address below:
EXPX B.V.
Schiedamse Vest 154
3011 BH Rotterdam
The Netherlands