PRIVACY POLICY

Caransa Heritage Group
Pacayastraat 4G
1105 BT Amsterdam
The Netherlands
E-mail: info@caransaheritage.nl
Website: caransaheritage.com

1. INTRODUCTION

1. Caransa Heritage Group respects your privacy and processes personal data exclusively in
accordance with the General Data Protection Regulation (“GDPR”)
and other applicable privacy legislation.
2. This privacy statement explains what personal data we collect, why
we do so, how long we retain data and what rights you have.
3. Caransa Heritage Group is the data controller within the meaning of the GDPR for the
processing of personal data.

2. PERSONAL DATA WE PROCESS

Caransa Heritage Group may process the following personal data, amongst other things:
a. first name and surname;
b. email address;
c. telephone number;
d. company details;
e. IP address;
f. browser and device data;
g. location data;
h. data relating to your activities on our website;
i. other personal data that you actively provide via contact forms, email or
telephone contact.

3. PURPOSES AND LEGAL BASES FOR PROCESSING

We process personal data exclusively for legitimate purposes,
including:
a. responding to enquiries;
b. performing contracts;
c. sending information or newsletters;
d. improving our website and services;
e. analysing website usage;
f. complying with legal obligations.
Processing takes place on the basis of one or more of the following legal grounds set out in
Article 6 of the GDPR:
a. consent of the data subject;
b. performance of a contract;
c. legal obligation;
d. legitimate interest of Caransa Heritage Group.

4. RETENTION PERIODS

1. Caransa Heritage Group does not retain personal data for longer than is necessary for the
purposes for which it was collected, unless a statutory retention obligation
requires otherwise.
2. In principle, we apply the following retention periods:
a. contact enquiries: up to 12 months;
b. newsletter data: until you unsubscribe;
c. analytical data: up to 26 months;
d. administrative data: in accordance with statutory tax retention periods.

5. SHARING OF PERSONAL DATA

1. Caransa Heritage Group does not sell your personal data to third parties.
2. Personal data may only be shared with third parties if this
is necessary for:
a. the provision of our services;
b. technical support;
c. hosting;
d. analysis and marketing purposes;
e. legal obligations.
3. Caransa Heritage Group enters into data processing agreements with external processors in accordance with
Article 28 of the GDPR.

6. INTERNATIONAL TRANSFERS

1. If personal data is processed outside the European Economic
Area (“EEA”), Caransa Heritage Group ensures appropriate safeguards in accordance with the
GDPR, including the European Commission’s Standard Contractual Clauses.

7. COOKIES

A. FUNCTIONAL COOKIES
1. Functional cookies are necessary for the website to function correctly.
B. ANALYTICAL COOKIES
1. Caransa Heritage Group may use analytical cookies to gain insight into the
use of the website and to improve the user experience.
C. TRACKING COOKIES
1. Tracking cookies are only placed if you have given your prior
consent.
2. You can change your cookie settings at any time via your
browser settings or the cookie banner on our website.

8. SECURITY

1. Caransa Heritage Group takes appropriate technical and organisational measures to
protect personal data against loss, misuse, unauthorised access
or unlawful processing.
2. The website uses secure connections via TLS encryption.

9. RIGHTS OF DATA SUBJECTS

Under the GDPR, you have the right, amongst other things, to:
a. access your personal data;
b. rectify your data;
c. have your data erased;
d. object to processing;
e. request restriction of processing;
f. request data portability;
g. withdraw consent previously given.
Requests may be addressed to:
info@caransaheritage.nl
We will respond to your request within one month at the latest.

10. IDENTIFICATION WHEN SUBMITTING REQUESTS

1. If necessary, Caransa Heritage Group may ask for additional identification to verify
that the request has actually been made by the data subject.
2. When sending proof of identity, we recommend using the
Government’s ‘Kopie ID’ app and obscuring sensitive details, such as your BSN and
document number.

11. COMPLAINTS

1. If you have any complaints regarding the processing of personal data by MAUP
B.V., please contact us at info@caransaheritage.nl.
2. You also have the right to lodge a complaint with the Dutch Data Protection Authority
(Autoriteit Persoonsgegevens).

12. CHANGES

1. Caransa Heritage Group reserves the right to amend this privacy statement.
2. The most up-to-date version is always published on the website.

Version: September  2026