This Privacy Policy explains how Ad Astra Advertisements & Marketing Solutions ("we," "us," or "our") collects, uses, discloses, and safeguards your personal data in accordance with the General Data Protection Regulation (GDPR) and the Dutch Implementation Act (Uitvoeringswet AVG). Who We Are Ad Astra Advertisements & Marketing Solutions is an advertising agency located in the Netherlands. We are the data controller for the personal information collected through our services, website, and business operations. Contact Details: Address: Pieter Breughelstraat 4, 1816DD ALKMAAR, North-Holland Email: info@aa-advertisements.com Phone: 072 202 9318 Chamber of Commerce (KVK) Number: 96022205 Personal Data We Collect We may collect the following types of personal data: From Clients Contact information (name, email address, phone number, business address) Billing information Communications and correspondence Contract details From End Users (of Client Campaigns) Demographic information Behavioral data Device information IP addresses Cookies and similar technologies Campaign interaction data From Website Visitors Contact information provided through forms IP address and device information Browsing behavior via cookies Information you choose to provide when contacting us Legal Basis for Processing We process personal data based on one or more of the following legal grounds: Consent: When you explicitly agree to the processing of your personal data. Contractual Necessity: When processing is necessary to fulfill a contract. Legal Obligation: When processing is necessary to comply with Dutch or EU law. Legitimate Interests: When we have a legitimate business interest that is not overridden by your rights and freedoms. How We Use Personal Data We use personal data for the following purposes: Providing and improving our advertising services Managing client relationships and accounts Processing payments and maintaining financial records Analyzing campaign performance Customizing advertising content Communicating with clients and potential clients Complying with legal obligations Protecting our legal rights and preventing fraud Data Sharing and Recipients We may share personal data with the following categories of recipients: Service Providers: Third parties who help us deliver our services (e.g., hosting providers, analytics providers, payment processors) Clients: For data collected as part of our advertising services Legal Authorities: When required by Dutch law, court order, or regulatory requirement Professional Advisors: Such as lawyers, accountants, and insurers All third-party service providers are required to take appropriate security measures to protect personal data in accordance with our policies and Dutch data protection legislation. International Data Transfers If we transfer personal data outside the European Economic Area (EEA), we ensure adequate protection through: Transfers to countries with an adequacy decision from the European Commission Implementation of Standard Contractual Clauses Other appropriate safeguards as required by the GDPR and Dutch law Data Retention We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include: The period needed to provide services to clients Legal obligations requiring data retention Statute of limitations under Dutch law Potential disputes Guidelines issued by the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) Your Rights Under GDPR and Dutch Law Under the GDPR and Dutch law, you have the following rights: Right to Information: Transparent information about how we use your data Right of Access: Request copies of your personal data Right to Rectification: Correct inaccurate information Right to Erasure: Request deletion of personal data in certain circumstances Right to Restrict Processing: Limit how we use your data Right to Data Portability: Receive your data in a machine-readable format Right to Object: Object to processing based on legitimate interests Right to Withdraw Consent: Withdraw previously given consent at any time Rights Related to Automated Decision Making: Protections regarding automated decision-making To exercise these rights, please contact us using the details provided above. We will respond to your request within one month as required by the GDPR and Dutch law. Dutch Data Protection Authority If you have concerns about our data processing activities, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): Autoriteit Persoonsgegevens Postbus 93374 2509 AJ DEN HAAG https://autoriteitpersoonsgegevens.nl Security Measures We implement appropriate technical and organizational measures to protect personal data, including: Encryption of personal data where appropriate Regular security assessments Access controls and authentication procedures Staff training on data protection Data protection impact assessments where required by Dutch law Cookies and Similar Technologies Our website and services may use cookies and similar tracking technologies. For more information, please see our separate Cookie Policy. When required by Dutch law, we will request your consent before placing non-essential cookies. Changes to This Privacy Policy We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by posting the updated policy on our website and, where required by law, seeking your consent. Special Categories of Data We generally do not collect or process special categories of personal data (such as information about health, racial or ethnic origin, political opinions, religious beliefs). If processing such data becomes necessary, we will do so in accordance with the GDPR, Dutch law, and with explicit consent where required. Automated Decision Making We may use profiling techniques for advertising targeting purposes. You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significantly affect you, except in certain circumstances permitted by the GDPR and Dutch law. Children's Privacy Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child under 16 without verification of parental consent, we will take steps to remove that information from our servers in accordance with Dutch law. Last Updated This Privacy Policy was last updated on 13-03-2025.