EU Privacy Statement

This privacy statement was last updated on December 11, 2024, and applies to citizens and legal permanent residents of the European Economic Area and Switzerland.

In this privacy statement, we explain what we do with the data we obtain about you via https://www.candyfestival.nl . We recommend that you read this statement carefully. In our processing, we comply with the requirements of privacy legislation. Thismeans, among other things, that:

• we clearly state for what purposeswe process personal data. We do this via this privacystatement;

• We strive to limit our collection of personal data toonly the personal data necessary for legitimate purposes;

• we first ask you for explicitconsentto process your personal data in cases where your consent is required;

• we take appropriate security measures to protect your personal data and alsorequire this from parties that process personal data on our behalf;

• We respect your right to access, correct, or delete your personal data upon your request.

If you have any questions or would like to know exactly what data we store about you, please contact us.

1. Purpose, data and retention period

We may receive or collect personal data for a number of purposes related to our business operations, including the following:

1.1 Contact – by means of telephone, post, email and/or web forms For that purpose, we use the following personal data:

• A first and last name

• An email address

The basis on which we are permitted to process this data is: After consent has been granted.

Retention period We retain this data only until the service has been terminated.

1.2 Payments For that purpose, we use the following personal data:

• A first and last name

• A home or other physical address, including street name and name of a city or town

• A telephone number

• An email address

The basis on which we are permitted to process this data is: It is necessary for the performance of a contract or for preparatory proceedings in connection with a contract to which the data subject is a party.

Retention period We retain this data only until the service has been terminated.

1.3 Newsletters For that purpose, we use the following personal data:

• A first and last name

• An email address

The basis on which we are permitted to process this data is: It is necessary for the performance of a contract or for preparatory proceedings in connection with a contract to which the data subject is a party.

Retention period We retain this data only until the service has been terminated.

1.4 Collecting and analyzing statistics for website improvement. For that purpose, we use the following personal data:

• IP Address

• Information about internet activity, including but not limited to browsing history, search history, and information about a consumer's interaction with a website, application, or advertisement

• Geolocation data

The basis on which we are permitted to process this data is: After consent has been granted.

Retention period We retain this data only until the service has been terminated.

1.5 To be able to offer personalized products and services. For that purpose, we use the following personal data:

• Information about internet activity, including but not limited to browsing history, search history, and information about a consumer's interaction with a website, application, or advertisement

• IP Address

• Geolocation data

The basis on which we are permitted to process this data is: After consent has been granted.

Retention period We retain this data only until the service has been terminated.

1.6 Deliveries For that purpose, we use the following personal data:

• A first and last name

• A home or other physical address, including street name and name of a city or town

• A telephone number

• An email address

The basis on which we are permitted to process this data is: It is necessary for the performance of a contract or for preparatory proceedings in connection with a contract to which the data subject is a party.

Retention period We retain this data only until the service has been terminated.

2. Sharing with other parties

We only share this data with Processors and other Third Parties for which consentis required.

3. Cookies

To provide the best experiences, we and our partners use technologies such as cookies to store and/or access device information. Consent to these technologies enables us and our partners to process personaldata such as browsing behavior or uniqueIDs on this site. If you do not give consent or withdraw it, this may affect certain functions. For more information about these technologies and partners, please read our Cookie Policy.

4. Sharing with other parties

We share personal data if we are required to provide information by law or by a court order, in response to a law enforcement agency, to the extent permitted under other legal provisions, or for an investigation into a matter relating to public safety.

If our site or organisation is acquired, sold, or involved in a merger or acquisition, your information may be disclosed to our advisors and prospective purchasers and may be passed on to the new owners.

Yool Food Concepts BV participates in the IAB Europe Transparency & Consent Framework and complies with the specifications and policies of the IAB. It uses the Consent Management Platform withidentification number 332.

We have entered into a Data Processing Agreement with Google. Google may not use the data for other Google services.

5. Security

The security of personal data is of great importance to us. We take appropriatesecurity measures to limit misuse of and unauthorized access to personal data. In this way, we ensure that only necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly checked.

6. Third party websites

This Privacy Statement does not apply to third-party websites linked to from these sites. We do not guarantee that these sites will handle your personal data reliably or securely. We encourage you to read the privacy statements of these sites before using them.

7. Changes to this privacy statement

We reserve the right to make changes to this privacy statement. We recommend that you consult this privacy statement regularly to ensure you are aware of any changes. We will also actively inform you where possible.

8. Accessing and changing your data

If you have questions or would like to know what personal data we hold about you, please contact us. You can contact us using the details below. You have the following rights:

• You have the right to know why your personal data is needed, what happens to it and how long it is kept.

• Right to access: you can submit a request to access the data we process about you.

• Right to rectification and supplementation: you have the right to supplement, correct, delete or block your personal data whenever you wish.

• If you give us consent to process your data, you have the right to withdraw that consent and have your personal data deleted.

• Right to data portability: you have the right to request all your personal data from the Controller and to transfer it in its entirety to another Controller.

• Rightto object: you can object to the processing of your data. We willcomply, unless there are legitimate grounds for processing.

Please ensure that you always clearly state who you are, so that we can be certain that we do not modify or delete data belonging to the wrong person.

9. Filing a complaint

If you are not satisfied with the way we handle (a complaint about) the processing of your personal data, you have the right to file a complaint with the Dutch Data Protection Authority.

10. Contact information

Yool Food Concepts BV Frobenstraat 5, 3045 RD Rotterdam

Netherlands Website: https://www.candyfestival.nl E-mail: [email protected] Phone number: 010 – 3003388