Privacy Policy_

1. Introduction

Welcome to Fioritmo ("we," "our," or "us"). We are an IT and software consultancy based in the Netherlands. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (fioritmo.com) or engage with our services, in accordance with the General Data Protection Regulation (GDPR).

2. The Data Controller

For the purposes of the GDPR, Fioritmo is the Data Controller of the personal data collected through this website.

• Company Name: Fioritmo
• Address: Keizersgracht 520H, 1017 EK Amsterdam, The Netherlands
• Chamber of Commerce (KVK) Number: 82771952

3. Information We Collect

We may collect and process the following types of personal data:

• Identity & Contact Data: Name, email address, phone number, and company name when you fill out our contact forms, request a consultation, or subscribe to our communications.
• Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform.
• Usage Data: Information about how you use our website, products, and services (often collected via cookies).

4. How We Use Your Data & Legal Basis

Under the GDPR, we only process your data when we have a legal basis to do so:

• To provide our services: Communicating with you regarding projects, consultations, or inquiries.
• To improve our website: Analyzing user behavior to optimize our site's user experience.
• Marketing communications: Sending you updates or newsletters, if you have opted in.
• Legal compliance: Fulfilling statutory obligations under Dutch or European law.

5. Data Sharing and Third Parties

We do not sell your personal data. We may share your data with trusted third-party service providers who assist us in operating our website, conducting our business, or servicing you, hosting providers (Google Cloud), analytics tools (Google Analytics). These parties are bound by strict data processing agreements to keep your information confidential and secure.

6. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

7. Your GDPR Data Protection Rights

Under certain circumstances, you have the following rights under data protection laws:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of incomplete or inaccurate data.
• Right to Erasure (Right to be Forgotten): Request deletion of your personal data.
• Right to Restrict Processing: Request the suspension of processing your personal data.
• Right to Data Portability: Request the transfer of your personal data to you or a third party.
• Right to Object: Object to the processing of your personal data where we are relying on a legitimate interest.
• Right to Withdraw Consent: Withdraw consent at any time where we are relying on consent to process your personal data.

To exercise any of these rights, please contact us.