Privacy Policy

Last Updated: December 2024

nextspace B.V. ("nextspace", "we", "us", or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our digital marketplace platform and services.

Data Controller

nextspace B.V. is the data controller for the personal data we process. We are a company registered in the Netherlands with registration number 53829614 and VAT number NL846592037B01. Our registered office is located at Kerkstraat 235, 4891 DJ Breda, North Brabant, Netherlands.

Data Collection

The data we collect includes personal information such as your name, email address, phone number, company details, and payment information when you register for our marketplace platform, make purchases, or contact us for support. We also collect technical data including IP addresses, browser information, device identifiers, and usage analytics to improve our services and ensure platform security.

Information You Provide

• Account registration details (name, email, password)
• Business information (company name, address, VAT number)
• Contact information (phone number, mailing address)
• Payment and billing information
• Communications with our support team
• Product listings and marketplace content

Information We Collect Automatically

• Device and browser information
• IP address and location data
• Platform usage and navigation patterns
• Transaction and order history
• Performance and error logs

How We Use Your Information

We explain how we use your information to provide and improve our marketplace services, process transactions, communicate with you about your account and orders, ensure platform security, comply with legal obligations, and send marketing communications where you have consented. Our use of your data is always based on a valid legal basis under GDPR.

Legal Basis for Processing

• Contract Performance: Processing necessary to provide our marketplace services
• Legitimate Interests: Platform security, fraud prevention, and service improvement
• Legal Compliance: Meeting regulatory requirements and tax obligations
• Consent: Marketing communications and optional features

Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your information with trusted service providers who assist us in operating our platform, payment processors for transaction handling, legal authorities when required by law, and business partners for marketplace functionality. All data sharing is conducted under strict contractual agreements to protect your privacy.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy. Account information is kept for the duration of your active account plus seven years for legal and tax compliance. Transaction records are maintained for ten years as required by Dutch commercial law. Marketing preferences are stored until you withdraw consent. Technical logs and analytics data are typically retained for two years.

Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for consent-based processing

Data Security

We implement robust security measures to protect your personal data, including encryption of data in transit and at rest, regular security assessments and audits, access controls and authentication systems, secure data centers with physical security, and staff training on data protection principles. We are committed to maintaining the highest standards of data security.

International Data Transfers

As a European-based company, we primarily process data within the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or transfers to countries with adequate protection as determined by the European Commission.

Cookies and Tracking

Our website uses cookies and similar technologies to enhance your browsing experience, analyze website traffic, and provide personalized content. For detailed information about our use of cookies, please refer to our Cookie Policy.

Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, sending you an email notification. Your continued use of our services after any changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please contact us using the following information:

Supervisory Authority

If you believe we have not handled your personal data in accordance with this Privacy Policy or applicable data protection laws, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.