This privacy notice informs you about how and why Creventic B.V., reg.no 12057725 (“Creventic B.V.,” “we,” “us” or “our”) will process your personal data when you chose to participate in one of our social media giveaways. We want you to feel safe with our processing of your personal data and always strive to be transparent in what we do and why. Below, you will find information on what kind of personal data we process, why we do it, what we use it for and how we may share it.

Creventic B.V. is the data controller (in accordance with the GDPR) of any processing of your personal data.

We will only process your personal data in accordance with applicable laws, and for the purposes, and on the legal grounds, as set out below. We will never sell your personal data and will not use your personal data for any purpose that is incompatible with the below purposes. Further, we will only use your personal data during the period as set out in “storage period”, after which, your personal data will be erased.

Personal data: Your name, email address and social media account

Purpose of processing: administrating participants, including evaluating elegibility to participate and randomly drawing a winner

Legal ground for processing: The processing is necessary for our legitimate interest of administrating the giveaway in accordance with its terms.

Storage period: We will process your personal data for the duration of the giveaway term, as communicated by us, until the winner is drawn.

Only the people who need to process personal data for the purposes mentioned above have access to your personal data.

We may need to share your personal data with our group companies. We further may need to allow our suppliers access to your personal data when they perform services on our behalf, mainly to provide support and maintenance of IT systems, storage services and marketing, as well as couriers for sending products to you.

Any transfer of data outside the EU/EEA is made in line with data protection laws. Our international transfers of personal data (including transfers to our group companies and suppliers outside the EU/EEA) are, where applicable, based on the EU Commission’s standard contractual clauses. For further information about this, please contact us.

You are entitled to the following rights under applicable data protection laws:

• The right to access: you may at any time request to access your personal data. Upon request, we will provide a copy of your personal data in a commonly used electronic form.
• The right to rectification: you are entitled to obtain rectification of inaccurate personal data and to have incomplete personal data completed.
• The right to erasure (“right to be forgotten”): under certain circumstances (including processing on the basis of your consent), you may request us to delete your personal data. Please note that this right is not unconditional. Therefore, an attempt to invoke the right might not lead to an action from us.
• The right to object: you may have the right to object to certain processing activities conducted by the us in relation to your personal data, such as where our processing of your personal data is based on our legitimate interest.
• The right to restriction of processing: you may under certain circumstances request from us to restrict the processing of your personal data. Please note that this right is not unconditional. Therefore, an attempt to invoke the right might not lead to an action from us.
• The right to data portability: you are entitled to receive your personal data (or have your personal data directly transmitted to another data controller) in a structured, commonly used and machine-readable format.

If you have any questions relating to our handling of your personal data or if you would like to invoke any of your rights under applicable privacy legislation, please contact us at: support@creventic.com.