1. Introduction

This Privacy Statement describes how wecollect, use, and share (hereinafter: process) your personal data.

We are the owner of the website www.vhcvu.com (hereinafter referred to as the Website). We are committed to protecting the privacy of our clients and online users such as you as our website visitor. For this reason, we consider the protection of your personal data of fundamental importance. In this Privacy Statement we describe how we deal with the personal data that we process via our Website managed by us and the services (the Services) offered by us. This Privacy Statement applies to your use of our Website and Services. If you have any questions regarding this Privacy Statement, please contact one of us at our email addresses which you will find on the Website.

All personal data processed by us is in compliance with the European General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR).

2. Controller

We are the controller of the processed personal data within the meaning of article 4(7) and article 24 of the GDPR. We are located at Antonio Vivaldistraat 2-8, 1083 HP Amsterdam.

3. The personal data we process

We process personal data from our clients. This includes personal data that is collected from providing our Services or by email with your request for information.

In that context, we may collect your personal data such as your name, home address, telephone number, e-mail address, age, gender, nationality, payment information and other information or documents you shared with us for providing our Services.

We may combine the information above with other information we have collected about you both online and in person.

4. Purposes and processing grounds

We process your personal data, for the following purposes and we have also indicated the relevant ground for processing:

1. to fulfil our obligations to provide you with our Services or other requests you may make (based on contract according to art. 6(1)(b) GDPR);
2. to contact you to answer your questions, and provide requested information (based on consent, contract and legitimate interest according to art. 6(1)(a), (b) or (f) GDPR);
3. to secure our business goals (based on legitimate interest according to art. 6(1)(f) GDPR);
4. for analysis of personal data (e.g. address and/or city, language) to provide personalised Services (based on consent or legitimate interest according to art. 6(1)(a) or (f) GDPR):
5. to send you information with offers and information about Services. Please note that you can always object to such use, via the ‘unsubscribe’ link in any email newsletters (based on consent according to art. 6(1)(a) GDPR);
6. to comply with various legal obligations (based on compliance with a legal obligation according to art. 6(1)(c) GDPR); and
7. if you respond to or participate in a survey, contest, event, or a marketing communication in order to inform you about our activities, campaigns, events and other marketing initiatives (based on consent, contract or legitimate interest according to art. 6(1)(a), (b) or (f) GDPR).

5. Retention

We shall process the personal data for a period as long as legally required or necessary and allowed for the purpose(s) for which it was obtained. Immediately after these periods we will destroy the personal data and/or anonymise it.

The criteria used to determine our retention periods include, but may not be limited to:

• the duration of our ongoing relationship with you and the Services we offer you;
  • whether or not we are subject to any legal obligation(s); and
  • any other legal necessity (such as applicable limitation period(s), litigation, or internal or external investigations).

Furthermore, we may process the personal data for a longer period:

• in order to comply with statutory retention periods (such as those required by tax legislation), or
  • in order to prove compliance with applicable statutory obligations (such as the GDPR).

If you request deletion of your personal data by contacting us, all of your personal data collected by us shall be deleted, unless we are obligated to retain such information, whether by law, to provide the Services for which the information was processed, or for internal use.

6. Sharing personal data

We will only make personal data available to third parties that are involved in providing our Website and the execution of our Services. These third parties process personal data according to our instructions and any such use shall be our full responsibility. We do not pass on your personal data to other third parties without your explicit permission, unless we are legally obliged to do so, or in case of a business transaction, such as (but not limited to) a transfer of shares, merger or consolidation with another entity or transfer of business assets.

We will not transfer your personal data outside of the European Economic Area.

7. Your rights

Under the GDPR, you may have several rights with regard to the personal data we process. These rights are listed below.

• The right to obtain confirmation as to whether or not we process your personal data;
• The right to request access, receive, transfer, rectify, erase or withdraw your consent for processing personal data in cases where our processing is based on consent;
• The right to (temporarily) object to our processing of your personal data.

If you wish to exercise one of the above rights, please contact us at one of our email addresses. If you want to file a complaint with respect to our processing of personal data, you can file your complaint with the Autoriteit Persoonsgegevens.

8. Changes to this privacy Statement

We may update this Privacy Statement from time to time, so you may want to check it each time you submit personal data to us. The date of the most recent update is 1 April 2025.

Codex Van Hussen B.V.
Mr. Drs. Arnold R. J. Croiset van Uchelen