This Privacy Policy describes the manner in which Puzzel.org collects, uses, maintains, discloses and otherwise processes personal data collected from its customers and website visitors (each, a 'User'). Puzzel.org is the 'controller' of the Users’ personal data, as defined in the European General Data Protection Regulation ('GDPR').

Users who have signed up for an account on our website ('Site') can create content on the Site, which content can be accessed and used by the Users’ participants ('Participants'). With regard to the personal data of the Participants, Puzzel.org is regarded as 'processor' as defined in the GDPR. Puzzel.org’ terms and conditions cover the processing by Puzzel.org of the Participants’ personal data.

What personal data do we collect?

We collect and use the following personal data about our Users:

First name (obligatory)
Your email address (obligatory)
Your password (obligatory, however we hash your password so that it is not legible for us or anyone else)
Payment information (transactions in case of paid subscriptions)
Preferred language
Your User data, including the activities in your account and the content you have created
Your correspondence with us

Are you obliged to provide certain personal data?

Yes, we require the obligatory personal data set out above to be able to conclude and perform the agreement with you and to fulfil our legal obligations for administration and tax purposes. If you do not provide this personal data, we cannot conclude the agreement with you.

What do we use the collected personal data for?

We use the personal data for the following purposes:

To enable you to sign up for, and maintain an account (user / profile name, email address)
To enable you to see your account activities and the content you have created
To secure your account (password)
To process your order and payments
For administration and tax purposes
To be able to communicate with you and provide support
To know more about our website visitors and to improve the user friendliness of our website (we only use functional cookies and analytical cookies for which no consent is required)

On what legal grounds do we use your personal data?

We use your personal data to be able to conclude and perform the agreement we have with you, to fulfil our legal obligations and for our legitimate interests. These legitimate interests are set out in this Privacy Policy.

We can ask your consent for specific types of use of your personal data.

With whom do we share your personal data?

We do not sell, trade, or rent your personal data to others.

We use third party service providers to help us operate the services:

We use an internet service provider to host the Site and our email functionality
We use a mailing service provider to send mailings by email
We use payment service providers to process customers’ payments (payment providers used by customers through their own account with such payment provider, are not our service providers)
We use a service provider for analyzing our customers’ use of the Service

Incidentally, we may be obliged pursuant to a legal obligations, to share certain personal data with government authorities or third parties.

Are your data transferred to outside the EEA?

Yes, we transfer your data to outside the European Economic Area (‘EEA’).

Our mail service, support tool, chat tool, and analytics providers are located in the United States of America and have a Privacy Shield certification (www.privacyshield.gov). Our payment service provider is located in the United States of America. If you want more information or documentation about the appropriate safeguards for transfer, please contact using the contact details at the end of this Privacy Policy.

If you are yourself located outside the EEA, when accessing and receiving your own personal data, it will be transferred to you for the purpose of concluding and performing the agreement we have with you or your company.

How long do we store your personal data?

We store the personal data in your account as long as you have registered an account with us and until 2 years afterwards. The personal data in our financial administration is stored during a maximum term of 7 years. Our correspondence with you is stored during a maximum term of 7 years.

Incidentally, we may have to store your personal data for longer periods, for example if this is necessary in relation to legal proceedings involving you, or a legal obligation imposed on us.

What rights do you have?

Pursuant to the GDPR, you have the following rights with regard to your personal data:

To ask for access and a copy of your personal data;
To receive information about the manner in which we process your personal data;
To have incorrect personal data corrected;
To have incomplete personal data completed, taking into account the purposes for which they were collected and/or used;
Under certain conditions to have your personal data deleted;
Under certain conditions to have your personal data restricted;
Under certain conditions to object to certain use of your personal data;
If you have given consent, to revoke your consent, without affecting the lawfulness of the earlier processing based on your consent;
If you have provided or created the personal data yourself and the processing is based on your consent or for the conclusion and/or performance of the agreement with you, and the personal data are processed by automated means: to receive your personal data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller;
To lodge a complaint with the competent data protection authority.

We may in some cases be entitled to refuse to comply with your request. We will then inform you of the reasons for the refusal. We will not be able to perform the agreement with you if we no longer have the obligatory personal data about you, which we will notify you of as well.

If you have questions, requests or complaints about your personal data, please use the contact details below.

How to contact us

If you have any questions, requests or complaints about this Privacy Policy or your personal data, please contact us at:

Puzzel.org (Puzzel.org)
Dopheide 28
3823 HL Amersfoort
The Netherlands
+31 61 4277 844
daan@puzzel.org

Changes to this Privacy Policy

This document was last updated on 9 February 2019.

We reserve the right to update this privacy policy. We will notify you of important changes to the Privacy Policy by sending you a notification through the Site.