Privacy Statement 360Performance

We at 360Performance highly value your privacy. The privacy statement below applies to data processing by 360Performance. 360Performance respects your privacy and endeavors to treat your data confidentially and in accordance with applicable privacy legislation.

Data

Firstly, a distinction must be made between personal data and special personal data. Personal data is information that tells something about you and can identify you. Examples of personal data include: first and last name, date of birth, address, email address, telephone number, and Citizen Service Number (BSN). Special personal data includes information about race, religion, health, and criminal history. At 360Performance, we do not process special personal data.

Use of the Website

When you visit our website, you can use most functions without your personal data being stored directly. However, we do use cookies. Cookies are small text files stored on your computer, smartphone, or tablet. By placing cookies, we can remember certain information about you, such as preference settings. These preferences are not linked to name, address, email, etc. With this information, we aim to enhance your experience on our website and provide you with relevant information about our services.

Our website uses legally permitted cookies:

• Cookies that make our website function properly.
• Cookies that ensure our website is user-friendly.

360Performance does not provide the information obtained through cookies to third parties without your prior consent. Furthermore, we have compiled a complete overview of the cookies we use on our website for you:

• _gat: This cookie helps limit the request rate to ensure the website maintains sufficient speed; the retention period is 1 minute.
• _git: This cookie stores a unique value for each page visited; the retention period is 1 day.
• _ga: This cookie is used to identify a unique website visitor; the visitor is assigned a randomly generated number. This cookie is primarily used for calculating visitor and session data for analysis reports. The retention period of this cookie is 2 years.
• NID: Google Maps displays the precise location of 360Performance on the contact page. The retention period of this cookie is 6 months.
• 1p_JAR: These cookies are used by Google to display relevant advertisements on Google sites based on your recent searches. The retention period of this cookie is 1 month.

360Performance uses Google Analytics on its website. The information collected by our cookies is stored on a server, such as Google's. To keep the data collected from you confidential, we use an IP anonymizer. This way, the last part of your IP address is anonymized. 360Performance complies with the requirements set by the Dutch Data Protection Authority. This means that:

• 360Performance has a data processing agreement with Google.
• The last octet of the IP address is hidden, achieved through our IP anonymizer.
• 360Performance has disabled "data sharing".
• 360Performance does not use other Google services in conjunction with Google Analytics and cookies.

If you do not wish to use cookies, you can configure your browser to not accept cookies. Furthermore, you can only delete cookies on your computer yourself.

Use of Our Services

If you wish to do business with 360Performance, we naturally collect data from you to conclude the agreement. To give you an idea of why and which data we process, we have compiled the following overview for you; please note that the information in this table is not exhaustive.

Exchange with Third Parties

Your data is provided to, among others, the following parties:

• Supervisory authorities, if necessary within the scope of their supervisory task.
• Involved contracted parties

Third parties to whom data is provided process the data in accordance with their own privacy statement. 360Performance will explicitly ask for your consent before sharing your data.

Use of Automated Decision-Making & Profiling

360Performance uses automated decision-making and/or profiling. For example, we use Facebook Pixel. Facebook Pixel is a piece of code we place on our website to learn more about our target audience, allowing us to offer you relevant Facebook advertisements. When you visit our website, you must indicate whether you agree to this method of data processing.

Retention Period

• Basic data such as invoices must be kept for 7 years according to the law.
• Messages via social media or email are generally stored for 1 year, except for data that is part of what has been agreed upon, for which a retention period of 7 years applies.

Data Security

Regarding data security, 360Performance operates within the given legal frameworks. 360Performance will take appropriate technical and organizational measures to protect the data against loss, theft, or any form of unlawful processing. In the context of security, the following measures, among others, have been taken:

• Data encryption.
• Limited access authorization within 360Performance.
• Treating data as confidential.
• Encrypted communication.

Your Rights

• You have the right to access your data; if you wish to do so, please inform us.
• You have the right to rectification; if your data is incorrect or has changed, please inform us.
• You have the right to file a complaint; if you have a complaint about our working methods regarding GDPR, you can report it to the Dutch Data Protection Authority. However, we would greatly appreciate it if you report a "data breach" to us should you discover one. This way, we can act quickly and appropriately. Naturally, we also adhere to the notification obligation (within 72 hours) to the Dutch Data Protection Authority.
• You have the right to data portability; if you as a customer/user decide to switch to another service provider, we will transfer the data if requested.
• You have the right to stop us from using your personal data. If you wish to do so, please send us a request via email. For further information, please refer to www.autoriteitpersoonsgegevens.nl.

Liability

This privacy statement only applies to the personal data 360Performance processes for the execution of the agreement with you, the customer. 360Performance is in no way responsible or liable for the operation and content of websites or services provided by third parties.

Changes to Privacy Statement

This privacy statement may be amended or supplemented by 360Performance at any time. This allows for the easy implementation of new legislation regarding the protection of personal data. Furthermore, it enables us to keep our privacy statement aligned with our business operations.

Identification

For all your requests or questions, 360Performance may ask you for further identification. 360Performance does this to prevent providing data to the wrong person. Therefore, 360Performance may ask you to send a copy of your identity document. The copy will be properly destroyed after the question or request has been handled.

Timelines

We strive to answer your questions and/or requests within one month. If the response takes longer than a month, for example, due to the complexity of the request, you will be notified by 360Performance.

Questions & Supervision

If you have questions about the personal data we process, you can contact: 360Performance Email: info@360performance.nl Tel.: +31614732070

Furthermore, you are free to file a complaint with the supervisor of the Dutch Data Protection Authority; for more information, see www.autoriteitpersoonsgegevens.nl