Privacy Policy

Contact Information

• Business Name: Sophron® Amsterdam Investment Club
• Website: www.amsterdaminvestmentclub.com
• Email: contact@amsterdaminvestmentclub.com
• Address: De Klencke 95B, Amsterdam, 1083 HH, NL

Changes to This Privacy Policy

This Privacy Policy may be amended by us from time to time. We therefore advise you to regularly review this Privacy Policy for any changes. The amended privacy policy will be published on the Site, stating the date on which the changes take effect. In the event of substantial or significant changes that may significantly affect one or more data subjects, we will endeavor to inform these data subjects directly.

Personal Data We Collect

We collect personal information about you from various sources, including directly from you, through your use of the Site, and from third parties such as Shopify.

Information You Provide Directly:

• Name, address, phone number, and email address
• Account details (username, password, security questions)
• Order details (billing/shipping info, payment confirmation)
• Customer support interactions

Information We Collect Automatically (Usage Data):

We use cookies, pixels, and similar technologies to collect:

• IP address
• Device and browser type
• Interaction data (pages visited, clicks, time on site)

Use of Personal Data

We use your personal data for the following purposes and on the following legal basis:

• Order Fulfillment and Account Management
  Purpose: Processing payments, shipping orders, and managing your account.
  Legal Basis: Performance of a contract (Art. 6(1)(b) GDPR).
• Connecting with Employers/Partners
  Purpose: Sharing your professional profile with participating companies and generating anonymous statistical overviews using AI tools regarding event participants.
  Legal Basis: Your explicit consent (Art. 6(1)(a) GDPR). You can withdraw this consent at any time.
• Marketing and Newsletters
  Purpose: Sending you updates and promotional offers.
  Legal Basis: Your consent (Art. 6(1)(a) GDPR) or our legitimate interest for existing customers (Art. 6(1)(f) GDPR).
• Security and Fraud Prevention
  Purpose: Detecting and preventing unauthorized access or fraudulent transactions.
  Legal Basis: Legitimate interests (Art. 6(1)(f) GDPR).
• Improve our Services:
  Purpose: analyze usage and customer behavior to optimize user experience
  Legal Basis: Legitimate interests (Art. 6(1)(f) GDPR).

We do not use automated tools for individual decisions or profiling. Art. 22 GDPR does not apply. We use automated analysis methods (such as AI) exclusively to create aggregated and anonymous overviews of event participants (e.g., the number of participants with certain interests).

Cookies and Tracking Technologies

We use:

• Functional Cookies: necessary for site operation
• Analytical Cookies: help us understand how users interact with the site
• Marketing Cookies: tailor ads and content

You can disable cookies via your browser. For more on cookies used by Shopify, visit: https://www.shopify.com/legal/cookies

Sharing of Personal Data

We may share your personal data with:

We may also share personal data with trusted third parties to help organize and facilitate events related to our services or community.

We also do not use or disclose sensitive personal information without your consent.

Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect data from minors. If we and we will delete it.

Data Retention

We do not retain your personal data longer than is necessary for the purposes for which it is processed. If you have placed an order with us or made a reservation, we will generally retain your personal data for up to two years after your reservation. We may retain transaction data for seven years if this is necessary to comply with our tax obligations. In addition, we may retain personal data that is necessary in the context of legal proceedings, complaints, and disputes for longer if this is necessary to protect our interests.

Security of Your Data

We take appropriate technical and organizational measures to secure your data and prevent unauthorized access, misuse, or disclosure.

• TLS/HTTPS Encryption: All Firebase Functions use automatic HTTPS/TLS encryption. Data in transit is encrypted by default.
• Access Control: Data access functions use token-based authentication with expiration and origin verification. Other functions use API keys or service tokens.
• Data Encryption at Rest: Firestore and Cloud Storage automatically encrypt all data at rest. Data is stored in EU region for GDPR compliance.
• Logging & Monitoring: Security events and access attempts are logged via Firebase Logger.

Your Privacy Rights

Under privacy legislation, you have a number of rights with regard to your personal data and its processing.

• Right of access. This is the right to ask us whether we hold any personal data about you and to access it.
• Right to rectification. You can ask us to change any personal data that is incorrect or incomplete.
• Right to be forgotten. In some cases, you have the right to have your personal data deleted by us, for example when your personal data is no longer necessary for the purposes for which we obtained it
• Right to restriction. This is the right to have less personal data processed or to temporarily stop processing. You can request this, for example, if you believe that your personal data is incorrect.
• Right to data portability. When we process your personal data on the basis of an agreement or consent, you have the right to data portability. This is the right to receive your personal data from us so that you can forward this data to another party.
• Right to object. You may object to the processing of your personal data.
• Withdrawal of your consent. If you have given us consent to process your personal data, you may withdraw that consent at any time. This withdrawal does not affect the processing of your personal data before you withdrew your consent.

To exercise your rights:

To exercise your rights, please contact us via the email address associated with your account. We may request additional information to verify your identity, but we will only request a copy of your ID if we cannot verify your identity through other, less intrusive means.

Email contact@amsterdaminvestmentclub.com.

If you have any complaints about how we handle your personal data, please contact us using the contact details in this Privacy Policy. We will be happy to help you find a solution. If that does not work, you can always submit a complaint to the Dutch Data Protection Authority. You can contact the Dutch Data Protection Authority using the following contact details: Dutch Data Protection Authority, PO Box 93374, 2509 AJ The Hague, telephone 088 - 1805 250, website: https://autoriteitpersoonsgegevens.nl.

International Transfers

While we prioritize hosting your data within the European Economic Area (EEA), we use third-party service providers (such as Shopify) that may process data in countries outside the EEA, including Canada and the United States.

When we transfer data to these countries, we ensure appropriate safeguards are in place, such as:

• Relying on the EU Commission's adequacy decision for third countries.
• Implementing EU-approved Standard Contractual Clauses into contracts to protect your data.

You may request a copy of these safeguards by contacting us.

Third-Party Links

Our Site may contain links to third-party sites. We are not responsible for the privacy practices of these sites. Please review their policies separately.

Questions or concerns? Contact us at contact@amsterdaminvestmentclub.com or at the address provided above.