Privacy statement

1. Who is responsible?

commercialreview B.V. is responsible for processing personal data via commercialreview.nl and related services.

2. Which data do we process?

• Account details, such as name, email address, date of birth, gender and profile information.
• Research and participation data, such as answers, point balance and redemption transactions.
• Technical data, such as IP address, device and browser information and usage statistics.
• Communication data, such as contact requests and newsletter preferences.

3. Why do we process this data?

• To create accounts and keep the platform working properly.
• To run studies, award points and enable rewards.
• To provide support, answer questions and improve the service.
• To send service messages and, with consent, newsletters.
• To prevent and investigate fraud, misuse and security incidents.

4. Legal bases

• Performance of the contract (for example account management and participation in studies).
• Consent (for example newsletters or specific processing where required).
• Legal obligations (such as tax retention requirements).
• Legitimate interest (such as security, quality improvement and statistics).

5. Retention periods

• We do not retain personal data longer than necessary for the purpose for which it was collected.
• Account and research data are deleted or anonymised when no longer needed, unless a legal retention requirement applies.
• Different periods may apply to specific processes, for example for administration or dispute handling.

6. Sharing with third parties

• We only share data with processors and partners that are necessary for our services.
• We enter into data processing agreements with parties that process personal data on our behalf.
• We do not sell personal data to third parties.

7. Cookies and analytics

• We use functional cookies to keep the website technically working properly.
• Analytical cookies may be used for statistics and performance measurement.
• Where required, we ask for consent in advance according to applicable cookie rules.

8. Your rights

• Right to access, correct and delete personal data.
• Right to restrict processing and data portability.
• Right to object to certain processing, such as direct marketing.
• Right to withdraw consent at any time for processing based on consent.

9. Security and notifications

• We take appropriate technical and organisational measures to secure data.
• In the event of a data breach, we act in accordance with legal reporting obligations.