Privacy Policy

Popi B.V., located at Willemskade 19, 8011 AD, Zwolle, is responsible for the processing of personal data as shown in this privacy statement.

Contact information:
Willemskade 19, 8011 AD, Zwolle
+31 (0) 38 - 2022150

Matthijs Huisman is the Data Protection Officer of Popi B.V. He can be reached via matthijs@popi.nl

Personal data that we process

Popi B.V. processes your personal data because you use our services and / or because you provide this data to us yourself.

Below you will find an overview of the personal data that we process:

• First and last name
• Address details
• Phone number
• Email address
• Other personal data that you actively provide, for example by creating a profile on this website, in correspondence and by telephone
• Information about your activities on our website
• Bank account number

Special and / or sensitive personal data that we process

Our website and / or service does not intend to collect data about website visitors under the age of 16. Unless they have permission from their parents or guardian. However, we cannot check whether a visitor is older than 16. We therefore advise parents to be involved in the online activities of their children, in order to prevent data about children from being collected without parental consent. If you are convinced that we have collected personal information about a minor without this permission, please contact us via matthijs@popi.nl and we will delete this information.

For what purpose and on what basis do we process personal data

Popi B.V. processes your personal data for the following purposes:

• Handling your payment
• Sending our newsletter
• To be able to call or e-mail you if necessary to carry out our services
• To inform you about changes to our services and products
• To offer you the possibility to create an account
• Popi B.V. also processes personal data if we are legally obliged to do so, such as information that we need for our tax return.

Popi's use of Google's API services

Popi uses Google's API to display visitor statistics of websites on our platform. We store, among other things, the following information:

• Account name and ID
• Available properties for Google Analytics 4
• Total number of visitors over the previous month

Popi's use of the information received from the Google API complies with the Google API Service User Data Policy and the limited use policy. Received data is not shared with third parties.

How long we keep personal data

Popi B.V. does not store your personal data longer than is strictly necessary to achieve the purposes for which your data is collected.

Sharing personal data with third parties

Popi B.V. does not sell your information to third parties and will only provide it if this is necessary for the execution of our agreement with you or to comply with a legal obligation. We conclude a processor agreement with companies that process your data on our behalf to ensure the same level of security and confidentiality of your data. Popi B.V. remains responsible for these processing operations.

Cookies, or similar techniques, that we use

A cookie is a small text file that is stored on your computer, tablet or smartphone when you visit this website. Popi B.V. uses three types of cookies. We always place necessary cookies, because the website does not work without them. We only place analytical and marketing cookies if you give your consent through the cookie banner.

Necessary cookies

These cookies are required for the technical operation of the website, such as logging in, your shopping cart, the chat function and remembering your cookie choice. No consent is needed for these.

Cookie	Provider	Purpose	Retention
*_session, XSRF-TOKEN	Popi	Keeps track of your session and protects forms against abuse.	Session, at most 2 hours
remember_web_*	Popi	Keeps you logged in when you choose that option.	5 years
popi_consent	Popi	Remembers your cookie choice.	1 year
TawkConnectionTime, twk_*	Tawk.to	Makes the chat function work.	Session

Analytical cookies

With these cookies we measure how visitors use the website, so we can improve it. We use Google Analytics for this. Without your consent Google only receives anonymised signals without cookies and without personal data. We also record ourselves through which source visitors find us. Without your consent we only remember that for the duration of your visit.

Cookie	Provider	Purpose	Retention
_ga, _ga_*	Google Analytics	Distinguishes visitors and tracks sessions to measure how the site is used.	2 years
popi_vid	Popi	Remembers through which source you found us, for example a search engine, advertisement or newsletter, so we know which channels work.	90 days

Marketing cookies

With these cookies we measure the results of our ads, and advertising platforms can show you relevant Popi ads. The data is shared with Google and Meta, who may also use it for their own purposes. See the Google privacy policy and the Meta privacy policy.

Cookie	Provider	Purpose	Retention
_gcl_au, _gcl_aw	Google Ads	Measures whether a visit came from a Google ad and attributes conversions to it.	3 months
_fbp, _fbc	Meta (Facebook, Instagram)	Measures whether a visit came from a Meta ad and shows relevant ads on Meta platforms.	3 months

Changing or withdrawing your choice

On your first visit the cookie banner asks for your choice. You can change or withdraw that choice at any time via the "Cookie settings" link at the bottom of every page. You can also refuse cookies or delete previously stored cookies in your browser settings.

View, modify or delete data

You have the right to view, correct or delete your personal data. You can do this yourself via the personal settings of your account. You also have the right to withdraw your consent to the data processing or to object to the processing of your personal data by our company and you have the right to data portability. This means that you can submit a request to us to send the personal data that we have about you in a computer file to you or another organization mentioned by you. If you want to exercise your right to object and / or right to data portability or if you have other questions / comments about data processing, please send a specified request to matthijs@popi.nl. To ensure that the request for access has been made by you, we ask you to send a copy of your ID with the request. Make your passport photo, MRZ (machine readable zone, the strip with numbers at the bottom of the passport), passport number and Citizen Service Number (BSN) black in this copy. This is to protect your privacy. Popi B.V. will respond to your request as soon as possible, but in any case within four weeks. Popi B.V. would you also like to point out that you have the opportunity to file a complaint with the national supervisory authority, the Dutch Data Protection Authority. This can be done via the following link: https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons

How we secure personal data

Popi B.V. takes the protection of your data seriously and takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. If you feel that your data is not properly secured or there are indications of abuse, please contact our customer service or via matthijs@popi.nl. Popi B.V. has taken the following measures to protect your personal data:

• TLS (formerly SSL) We send your data via a secure internet connection. You can see this in the address bar 'https' and the padlock in the address bar.
• DKIM, SPF and DMARC are three internet standards that we use to prevent you from receiving emails on our behalf that contain viruses, are spam or are intended to obtain personal (login) data.
• DNSSEC is an extra security (in addition to DNS) for converting a domain name (popi.nl) to the associated IP address (server name); it is provided with a digital signature. You can have that signature checked automatically. This way we prevent you from being redirected to a false IP address.