Privacy Notice
(v. 22-3-1)

For whom: Product

Processing of personal data in Nurtio

When you use our website or any of our products, software, or services Nurtio Technologies B.V. (“Nurtio”) will process your personal data. Below you will find information regarding which type of personal data is being collected, the reasons for and purposes of why we collect the data, and your rights regarding the processing of your personal data.

The controller of the personal data we process is the CEO of Nurtio Technologies B.V.

Contact information for Nurtio is:

Address: Molengraaffsingel 12, Delft 2629JD The Netherlands
E-mail: support@nurtio.com
Chamber of Commerce number: 71504230

For queries or questions regarding our processing of your personal data, you may contact support@nurtio.com

1. The purposes of our data collection and what types of data we collect

We collect and process your personal data for various purposes depending on who you are and how we get in touch with you. We collect the following personal data for the purposes mentioned below:

Sending out marketing materials, such as newsletters and information regarding our activities: The processing is necessary for the purpose of performing a contract with you as the data subject.
Respond to incoming inquiries through our support channel and web application feedback channel: Name, telephone number, e-mail address, and other personal data collected in connection with the inquiry. The processing purpose is based on the legitimate commercial interest of helping you with your inquiry.
The recruitment of new vacancies and positions: CV, applications references, and attestations. The processing of data is based on your given consent.
Administration of your user account: Your name, e-mail address, user name, and password. The processing purpose is based on the legitimate commercial interest of identifying our users and giving them access to a user account with their own credentials.
Handling of your device: Data from your device, including location, time, sensor data, device identification, device name, and details of the environment where the device is located. The processing purpose is based on the legitimate commercial interest in delivering and improving your user experience. Data regarding location, time, and sensor data is processed based on the legitimate commercial interest in providing service to you around providing the plants with proper care.

In order to obtain information regarding the use of our web pages, we use cookies. The processing of cookies is based on the commercial interest of adjusting our web pages for the benefit of users. We ensure your data protection by only using this information for statistical purposes. In these statistics, it is not possible to identify you as an individual.

2. Disclosure of personal data to others

We do not give out or disclose your personal data to others unless there is a legal obligation for such disclosure. Examples as to the basis for disclosure could typically be a contract with you or a legal basis in the law instructing us to provide the information. Nurtio uses data processors to collect, store, or in other ways process data on our behalf. In such cases, we have concluded data processing agreements to ensure information security in all segments of the data processing.

As of today, we use the following data processors:

Amazon, Things Mobile, and Sentry. Data about you is processed by Amazon, Things Mobile, and Sentry to provide customer support, handling your user account and handling the name, location, and sensor data of your device. The processing is based on our legitimate commercial interest in processing these data for this purpose.
Zendesk and Atlassian. Data about you is processed by using Zendesk and Atlassian as sub-processors to provide customer support efficiently. The processing is based on our legitimate commercial interest in processing these data for this purpose, as we consider it within our business purpose to provide our customers with support, which is not overridden by the interests or privacy of the data subjects.
UPS and DHL. Data about you is processed by UPS and DHL to ship packages to your address. The processing is necessary for the performance of a contract with you.
Wix. Data about you is processed by Wix to process orders on our webshop. The processing is necessary for the performance of a contract with you.
Slack. Data about you is processed by Slack to gather web application feedback. The processing is based on our legitimate commercial interest in processing these data for this purpose.
Mailchimp. Data about you is processed by Mailchimp to provide you with our newsletter. The processing is based on our legitimate commercial interest in processing these data for this purpose.
Social login, Google Analytics, Google Drive, Google Docs, and Gmail. Data about you is processed by Social login, Google Analytics, Google Drive, Google Docs, and Gmail for product analytics purposes. The processing is based on our legitimate commercial interest in processing these data for this purpose.

Your personal data might be transferred to countries outside the European Economic Area (third countries) in order to provide you services and where we use subcontractors. We always make sure that appropriate and suitable safeguards compliant with applicable laws are in place to protect your personal data.

Transfer to third countries will be protected by appropriate safeguards, namely the use of standard data protection clauses adopted or approved by the European Commission, a copy of which can be obtained from https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en. Transfer to the United States will be either be subject to and protected by the said standard data protection clauses, or subject to the EU-US Privacy Shield Framework (for the data protection requirements under the EU-US Privacy Shield, see www.privacyshield.gov).

3. Storage period

We only store your personal data for as long as necessary for the purpose of which the data was collected.

This means that personal data collection based on your consent will be deleted if you withdraw your consent. Data processed for the purpose of our newsletter will for instance be deleted after withdrawal of your consent.

Personal data we process in the performance of a contract with you will be deleted when the contract is implemented and all obligations pursuant to the contract have been implemented. Personal data related to your user account, including location data, is retained until you delete your account. Personal data related to the shipment of packages are deleted after 2 years of the last shipping date.

4. Your rights when we process your personal data

You have the right to obtaining access to, correction, and deletion of your personal data processed by us. You also have the right to obtain restriction of processing, direct objection to the processing, and obtain the right to data portability.

To assert your rights, please contact us through the aforementioned contact details. We will answer your request as soon as possible and in all cases no later than 30 days.

You can always withdraw your consent to our processing of your personal data. The easiest manner to withdraw your consent is to contact us through support@nurtio.com.

5. Complaints

If your opinion is that our processing of your personal data is not in compliance with the described manner here or in other ways not in compliance with the general data protection regulation, (GDPR) you can file a complaint to the Dutch Data Protection Authority.

6. Changes

If there should be a change in our services or a change in the regulation regarding the processing of personal data, this can cause changes in the information given in this notice. If we have your contact information, we will make you aware of these changes. In all cases, updated information will always be easily accessible on our web pages.