Privacy statement
RethinkRebels
In this privacy statement, we would like to give you more information about how we handle your personal data. Of course, we handle them carefully, we do not process more data than we need, and we process your personal data completely according to the rules of GDPR.
We process this personal data that we obtain from you.
In particular, we process personal data that you have provided to us yourself. So you know exactly which personal data these are.

For the execution of our agreement and to be able to deliver our products and/or services to you, it is necessary that we receive some personal data from you. Without this data, we unfortunately cannot deliver. It is therefore necessary that you provide these data to us in a timely manner and that you have properly checked that they are correct. It is therefore also necessary for us to process your personal data.

It concerns the following data
- First and last name
- Address
- E-mail address
- Phone number
- Username and password

Rest assured, the personal data we process from you does not build a profile of you, and we will never make automated decisions about you without human intervention.


What we do with your personal data
We may only process your personal data if it is necessary to achieve a legitimate purpose and we have a good basis for doing so.

We process your personal data for one or more of the following purposes:
With your consent, we will send you our newsletter. If you have withdrawn your consent, you will no longer receive our newsletters. We remove your data from our newsletter database within 30 days. We may also send you service emails to fulfill our agreement or because it is in our legitimate interest. We will keep your data for this purpose for as long as necessary and then delete it within 90 days.

If you contact us, it is still nice if we can respond and thus have some personal data. We processed this data in our legitimate interests and deleted it within two years of our last contact. If you have requested a quote from us, we process the data and information you have provided in order to send you that quote. If you do not subsequently enter into an agreement with us and we have no further contact, we will delete your data again within two years. To be able to fulfill the agreement to provide services or products to you, we need certain data. In any case, we process these for the duration of the agreement and up to five years afterwards.

After you have purchased a product or service from us, we will send you an invoice. This also contains personal data. We are required by law to keep these for at least seven financial years. You have an account with us that you can partially manage yourself. This is usually to fulfill a contract, or you have given your consent, or it is in our legitimate interest to process your personal data for this purpose. Some of the data in your account you can manage yourself. When you delete these, we no longer process this data for your account. Furthermore, we process your personal data in your account for up to five years after the end of the contract for which the account was needed or for five years after the deletion of the account, whichever is later. In our legitimate interest, we will sometimes send you offers or receive other direct marketing from us. You may object to this at any time. For this purpose, we will not process your personal data for longer than five years. We like to show what we mean to our clients, what work we do and deliver, and to what (kind of) persons, companies, and organizations we do. Therefore, we like to show that in our portfolio on our website, on social media, and in other promotional or advertising material. This is in our legitimate interest. It is necessary for us to secure our website and, for example, to prevent hacks and attacks and not allow unauthorized access to accounts or restricted areas of our website. Sometimes this also requires us to process personal data, such as IP addresses. This is in our legitimate interest, and we keep the personal data for a maximum of one year.

Consent
For some of these purposes, we first ask for your explicit consent. You also have the right to withdraw your consent at any time. You can do so by sending us an e-mail at hello@rethinkrebels.com. The processing of your personal data will remain valid until you have sent us this email.

Legitimate interest
We often have a legitimate interest in processing your personal data. This means that we have considered both your privacy interests and our own, mostly commercial interests. We therefore only process your personal data if this is necessary to protect our interests. We make this consideration for each purpose, always following the standard explanation of the Personal Data Authority.


Others who receive your personal data
We regularly need help, in one form or another, in our business operations. For example, we engage the following processors:
- Hosting of the website, app, learning environment or other platform
- Email and newsletter hosting
- Payment services and collection agencies
- Delivery services
- Cloud-based software, such as CRM and document storage
Third parties with whom we engage, such as:
- Virtual assistant
- Bookkeeper
- Advertising agency/marketing support

Processors and third parties must adequately safeguard your privacy. Therefore, we have ensured that all processors and third parties are based in the EU/EEA or other adequate country and that we have a processor agreement with them.


Your Rights
The fact that we may process your personal data in accordance with this privacy statement does not, of course, mean that you no longer have any say in your personal data at all. We would therefore like to briefly explain your rights and how you can exercise them below.

Withdrawing consent
If we have processed your personal data on the basis of consent, you may withdraw your consent at any time by emailing us at hello@rethinkrebels.com.

Inspection, rectification and erasure or restriction
Would you like to know what personal data we process about you? Then you can always ask us to view and correct your personal data. If you believe that we no longer need your personal data at all, you may also request that we delete it or restrict its processing. You can submit these requests simply by sending an e-mail to hello@rethinkrebels.com.

Objection
Do you object to the processing of your personal data? Please send us an e-mail to hello@rethinkrebels.com with your objections and arguments to support them. We will then process your objection. You will of course receive a confirmation of this at the e-mail address you used to submit your objection. If, for any reason, you have sent us your objection by postal mail, it must contain sufficient information for us to contact you.

Data portability
Would you like to stop using our services and transfer all your data to another service provider? Then we are obliged to provide you with the data in such an electronic way that you can easily transfer the data to the new service provider. You can ask us for this by sending an e-mail to hello@rethinkrebels.com.

Complaints
Do you have complaints? We find that very unfortunate and annoying. That is absolutely not our intention. Of course, we prefer that you first submit your complaint to us by email. You can use hello@rethinkrebels.com to send your complaint to us. We will then try to resolve your complaint as best we can within a reasonable period of time.

Is this is not to your satisfaction, or do you not want to submit your complaint to us? Then you still have the right to submit your complaint to the Dutch Data Protection Authority.


About us
Up to now, we have mainly talked about you and your personal data. But of course you want to know who we actually are and to whom you provide your personal data. This is who we are:

RethinkRebels, Termijen 40, 1852 TC Heiloo
Registered with the Chamber of Commerce under number 74295128.

You can best contact us by email or phone:
+31630152010
hello@rethinkrebels.com