cally.com's privacy and cookie statement

This privacy and cookie statement was last amended on June 14, 2023.

Kompas Meet B.V. (hereinafter called cally.com) provides a tool that enables family, friends or business contacts to schedule appointments with each other. Your privacy is of great importance to cally.com. Hence our adherence to the General Data Processing Regulation (GDPR). This privacy and cookie statement explains which personal data we process via the website and application of cally.com.

Our privacy and cookie statement in brief

In processing personal data, we comply with privacy legislation. This means that we:

• Lay down our purposes clearly in this privacy and cookie statement before processing your personal data.
• Store as few personal data as possible and only store those data that are required for our purposes.
• Ask explicit permission for the processing of your personal data, if permission is required.
• Take the required security measures to protect your personal data. These obligations are also imposed on parties that process personal data on our behalf.
• Respect your rights, such as the right to inspection, rectification or deletion of your personal data that we have processed.

For which purposes do we use your personal data?

We obtain various personal data from you. For each purpose, we will indicate which data we obtain from you, for what purpose we process them and for how long they will be retained. If you have any questions, or would like to know exactly which of your data are stored by us, please contact cally.com. The contact details are at the bottom of this privacy and cookie statement.

Contact

When you complete the contact form, consult our help desk, send an email, contact us by telephone, or otherwise contact us, you are responding to our offer to contact us (performance of the contract).

To that end, we will process the following personal data:

• Name
• Email address
• Telephone number
• Any information you enter yourself as the content of a message (your question)
• Any attachments that you add yourself

We keep this information for as long as it is required for this contact or for a maximum period of six months after we last contacted you.

Create or fill in a date picker

If you wish to create a date picker without an account, or are invited to fill in a date picker, you are accepting our offer to enter into an agreement with us.

To that end, we will process the following personal data:

• Name
• Email address
• IP address
• Geolocation
• Names of participants
• Email addresses of participants
• Content of the appointment

We will keep this information for a period of 30 days following the appointment.

Creating an account

You can create your own account on our website. This also allows you to log on to our application. You can choose to open a basic (free) account, a plus account or an enterprise account (performance of the agreement).

To that end, we will process the following personal data:

• Name
• Email address
• Password
• IP address
• Interests and other profile details
• Payment details (only for the plus and enterprise accounts)

We will keep this information for two years after you close your account or for two years after you last used your basic account. We keep some data for a longer period on account of the obligation to retain records for tax purposes for seven years.

Managing accounts

You can also add other people's contact details in your own account. This enables you to send out invitations quickly and efficiently (performance of the agreement).

To that end, we will process the following personal data:

• The names of contacts
• Contacts' email addresses

We will keep this information for two years after you close your account or for two years after you last used your basic account.

Application

We provide a digital environment where you can find everything about the above-mentioned topics. We use your email address and a self-selected password (log-in details) for the account. We need this data in order to be able to offer the account environment you request (agreement) and to provide you with our services. We will keep this information for the duration of your account and until we cease providing you with services. You can close your account in your account settings, or by contacting us through our support system.

Download our application

You can download our applications from the App Store or from Google Play. We have no influence on which personal data the provider (Apple or Google) processes and for which purpose. We therefore advise you to read the relevant privacy and cookie statements of the relevant provider.

Becoming a friend

Have we earned a place in your heart? If so, you can also become a donor (performance of the agreement).

To that end, we will process the following data belonging to you:

• Name
• Email address
• Address details
• Payment details

You can choose to share your data anonymously; this means your data will not be displayed in the Friends of Datumprikker list. We will keep this information for 2 years after you unsubscribe as a Friend. We retain some personal data for a longer period on account of the obligation to retain records for tax purposes.

Profiling

The appointments you make, your location and visits to our website show us what you are interested in. This will enable us to create a profile of you and display specific advertisements. We do so on the basis of our legitimate interest. After all, we want to show you the range of fun events you can pick. These customer profiles are spread across a number of categories so we can analyse your interests and further personalise the products we offer to you, including by way of personalised advertisements. For more information about the way this is done and the retention periods, see the cookie table below. You can always object to this by contacting us using the contact details at the bottom of this page.

Advertisements

Besides our own advertisement, we can also display advertisements from third-parties. You can manage your preference in the consent form.

Working at cally.com

Have you responded to one of our vacancies or have you submitted an unsolicited job application? If so, we will process your personal data in order to be able to process your application and to prepare an employment contract, should one be concluded.

To that end, we will process the following personal data:

• Name and address details
• Email address
• Telephone number
• Curriculum Vitae
• Motivation letter
• Any other information that you enclose with your application.

We will retain your application details for a maximum of six weeks after the position has been filled. We will retain the data so that we will still be able to contact you should the position become vacant again within the trial period. If we are unable to offer you a position at this time, we can – with your consent – retain the application details for another year. You can withdraw your consent at any time by sending us an email. If you come to work with us, we will keep your application details in the personnel file. This file will be kept for as long as is necessary, and the application details will be retained for a maximum of two years after commencement of the employment.

A social media and internet search may form part of the application procedure. This is required to ensure that our image is preserved when we take on new staff, and we do this based on a legitimate interest. For this purpose, we will Google your name and look at any profiles you may have on the various social media. It goes without saying that we will only do so insofar as these profiles are public; we will not ask you to grant us access to a protected social media page or make a connection with us. The results of the searches will be discussed with you. If you object to this, you can indicate this by email at the time of your application.

Sharing personal data with third parties

cally.com will share your personal data with third parties only where this is permitted under the current legislation. We may provide your personal data to third parties because:

• we have engaged them to process certain data;
• this is required in performing the agreement with you;
• you have provided permission to do so;
• we have a legitimate interest in doing so;
• we are legally obliged to do so (for example, if the police so demand in case of a suspicion of a crime).

The parties that process personal data on our or your instruction include:

• IT suppliers and providers
• cookie service providers
• payment service providers
• marketing companies
• advertisement agencies
• recruitment agencies (during a job application)

In order to provide you with our services, we may provide your personal data to parties located outside the European Economic Area (EEA). cally.com will do so only if the personal data are processed with an appropriate level of protection.

Social media buttons

On our website, we use social media buttons, which bring you to the social media platforms. This gives you the option of following us and sharing content within the network. In addition, you will see advertisements on your social media page. The buttons work through pieces of code originating from social media networks. If you want to know what the social media platforms do with your personal data, please read the relevant privacy statement:

• Facebook (privacy statement)
• Twitter (privacy statement)
• Instagram (privacy statement)
• LinkedIn (privacy statement)

These social media companies are based in the United States and are members of the US Department of Commerce's Privacy Shield programme. We are aware that the Privacy Shield was declared invalid on 16 July 2020 by the Court of Justice of the European Union. The practical effects of this remain to be seen. We are currently investigating the impact this will have on our organisation and the options available to us. As soon as the situation is clearer, we will adjust our procedure and privacy and cookie statement accordingly.

DigitalAudience

When you enter your email address on our website (to log in, create an event, participate in an event, or sign up for a newsletter), we share personal information with digitalAudience BV. This includes, but is not limited to, the following:

• Your email address (in a pseudonymous form)
• IP address
• Information about your browser and operating system
• The category of your event
• Various metadata related to your event

You can find digitalAudience's privacy statement here: https://digitalaudience.io/legal.

digitalAudience uses this information to create a unique token that can recognize you across your devices through a unique identifier. This unique identifier is shared with third-party advertising partners to enable interest-based and/or targeted advertising. These third-party advertising partners use the identifier to match demographic or interest-based information that you have shared with them.

Are your personal data protected?

cally.com has taken appropriate technical and organisational measures against loss or any form of unlawful processing (such as unauthorised inspection, impairment, alteration or provision of personal data) in connection with the processing of personal data to be performed.

Internet and cookies

We use our own cookies and those of third parties on our websites. Cookies are small data files that can automatically be stored on or accessed from a visitor's device (such as a PC, tablet or smartphone) when visiting a website. The cookies are sent to the web browser on the device.

These cookies collect the following information from you:

• IP address
• Cookie ID
• Website and clicking behaviour
• Referrer-URL

When you visit our website for the first time, we will show you a message containing an explanation of cookies. To the extent that we are obliged to do so, we will ask for your permission to use cookies.

The following cookies are used on the website.

Cookie	Type	Purpose	Retention period
Google Analytics Google LLC, United States Privacy statement	Analytical	These cookies are placed to gain an insight into visitor behaviour and improve the user experience based on that insight. We have configured these cookies to be privacy-friendly . This means that we: have concluded a processing agreement with Google; only provide Google with masked IP addresses; do not share any other data with Google; and do not use any other Google services in conjunction with Analytics.	A maximum of two years
Google Tag Manager Google LLC, United States Privacy statement	Functional	Cookies from Google Tag Manager make it possible to upload scripts of other cookies. Google Tag Manager is purely functional and is not used to collect personal data.	Session
Google DoubleClick Google LLC, United States Privacy statement	Marketing	These cookies are used to log the actions of website visitors on the website after they look at or click on advertisements. The purpose of this is to measure the effectiveness and show personalised advertisements.	A maximum of six months
Adhese	Functional	With this cookie, cally.com can track the number of unique visitors and the number of times a specific advertisement has already been delivered to a particular visitor. The cookie contains a unique value to identify a previous visitor, but does not contain any personal information to identify someone.	Maximum of 30 days
Facebook Connect Facebook, United States Privacy statement	Marketing	These cookies are used to enable Facebook advertising options. They log clicking behaviour and website visits. These cookies record a unique ID to recognise recurring devices. The purpose of this is to be able to show specific and personalised advertisements.	A maximum of three months
Facebook Custom Audience Facebook, United States Privacy statement	Marketing	These cookies are used to enable Facebook advertising options. They log clicking behaviour and website visits. These cookies record a unique ID to recognise recurring devices. The purpose of this is to be able to show specific and personalised advertisements.	A maximum of three months
Hotjar Hotjar, Malta Privacy statement	Analytical	Hotjar is a technological service that helps us to better understand our users' experience (how much time they spend on which page, on which links they decide to click, what users do and do not like, etc.). This enables us to improve our website with user feedback. Hotjar uses cookies and other technologies to collect information on users' behaviour and devices (in particular IP addresses of devices (recorded and stored only in anonymised form), device screen resolution, device type (unique device identifiers), browser information, geographical location (country level only) and preferred language for displaying our website). This functionality will not be enabled until you have consented to the placement of cookies.	A maximum of one year

Enabling and disabling cookies

You can set your web browser to accept the storage of cookies only if you agree to do so. Please consult the manual of your browser for more information on this. Please note that many websites will not function optimally if you have disabled cookies.

Deleting cookies

Most cookies have an expiry date. If the cookies have been given an expiry date, they will be automatically deleted once the expiry date has lapsed. You may also opt to delete cookies manually before the expiry date has lapsed. Please consult your browser's user guide for this purpose.

Your privacy rights

• Right of access: you have the right to access your personal data that we process.
• Right to rectification: You have the right to correct or supplement the personal data that you have provided and that we process if they are incorrect or incomplete.
• Right to object: you can object to the processing of your personal data and to direct marketing.
• Right of erasure: you may ask us to erase your personal data.
• Right to withdraw your consent: if you have given us permission to process personal data, you can withdraw this consent at any time.
• Right to data portability: insofar as this is technically possible, you have the right to have your personal data that we process transferred to a third party.
• Right to restriction of processing: in some cases, you may ask us to restrict the processing of your personal data (whether or not temporarily).

In the event of such a request, we may ask that you provide identification. We do this to confirm that you are indeed the person to whom the personal data belong.

In principle, we will comply with your request within one month. However, this term may be extended by two months for reasons relating to the specific privacy rights or the complexity of the request. If we extend this term, we will inform you in good time.

If you wish to exercise any of your rights, you can make this known via support@cally.com.

Email opt-out

cally.com can send invitations and other communication about the date pickers. We do this primarily per email. To completely opt-out of receiving any email from us, you can choose to do so here. If you’d like to opt-out of a specific type of email, you can do so in your account.

Changes to this privacy and cookie statement

cally.com reserves the right to amend this privacy and cookie statement. Please consult this privacy and cookie statement on a regular basis so that you are aware of any changes.

Submitting a complaint

If you believe we have not handled your data properly, you have the right to submit a complaint to the supervisory authority, the Dutch Data Protection Authority.

Contact details

Kompas Meet B.V.
Trading under the name cally.com
Tempeliersstraat 20A
2012 ED Haarlem

Email Address: support@cally.com

Chamber of Commerce number: 90669304