Privacy notice

1. Who is responsible?

This notice covers the Cherry People marketing website and contact about our services. We use the Cherry Marketing company details below as a starting point. The responsible legal entity for Cherry People must be confirmed before publication.

Company

Cherry B.V.

Dutch Chamber of Commerce number

60137266

Contact address

Galvanistraat 23
3861 NJ Nijkerk

Email

[email protected]

The contact address is an office location. The existing terms and conditions name Amsterdam as the registered office.

2. What data do we receive?

If you email us, we receive your email address, message and any information you include, such as your name, organisation and phone number. Only provide information needed for your question. Do not send employee files, medical information, Dutch citizen service numbers (BSN) or payslips through this website.

The demo form asks for your name, organisation, work email address, an optional phone number and your question. When you submit the form, these details are processed through a DigitalOcean Function and emailed through Brevo to our support team and the designated contacts for demo requests. The form code does not store requests in its own database and sends a confirmation email to the person who submitted the form via Brevo. The integration is only available once the Function and Brevo key have been configured on the hosting platform.

We use Google reCAPTCHA to protect the demo form against spam. The check loads when you start using the form. Google processes technical data, such as your IP address and browser information.

When you visit the website, the web server receives technical data to deliver the page, including your IP address, the requested address and browser information. Whether this data is stored in logs and for how long depends on the hosting setup. This will be established before launch.

3. What do we use data for?

We use contact details received to answer questions, discuss a demo and stay in touch about a potential collaboration. For a request on your own behalf, this may be necessary to prepare a contract at your request. When contacting us on behalf of your employer, our starting point is our legitimate interest in business communication; your privacy interests must also be considered.

Data needed for an agreed contract is used to perform that contract. Statutory record-keeping requirements are based on legal obligations. The precise application and retention periods must reflect the actual services provided.

4. Cookies and website analytics

With your consent, we use Google Analytics 4 to measure visits to this website. This involves processing pages visited, sessions, browser and device information and a cookie ID, among other data. This helps us improve the website. When the tag loads, Google also receives technical connection data, including the IP address.

The Google tag with measurement ID G-ZW51CTXT61 is only loaded if you allow statistics. If you refuse, the tag is not loaded. Advertising consent stays disabled, and Google signals and ad personalisation are turned off in the website configuration. No separate Google Tag Manager container is connected.

You can allow or refuse through the cookie banner. Use Open cookie settings or the link in the footer to change your choice and withdraw consent. Withdrawal stops the tag on this device and removes the Analytics cookies this website can remove; it does not automatically delete data Google has already received.

Fonts, images, videos and browser libraries are loaded from the website itself. Hosting and Analytics account settings must be checked for additional cookies and measurements before launch. Further information is available from Google on the data collected.

5. Who is data shared with?

Hosting and email providers may process data for the website and email service. The specific providers, their roles and storage locations must be filled in before publication. Appropriate agreements must be made with providers that process personal data on our behalf.

After consent, Google receives website visit data for Analytics. Check the contracting Google entity, processing terms and any processing outside the European Economic Area before publication. Also see Google's privacy policy. The website code does not send completed form fields to Google as custom Analytics events; any automatic measurements in the Analytics account still need to be checked. For demo requests, we use DigitalOcean to process the form and Brevo to send the email. The email goes to our support team and the designated contacts, Nikola and Marnix. Confirm the processing agreements, storage locations and any international transfers for these services before final publication. Any international transfers and the safeguards for them will then be described explicitly.

6. How long is data kept?

The form has no request database of its own. Submitted details do appear in email and may be retained by the email provider and Brevo. The specific retention periods for requests, mailboxes and sending logs still need to be established and entered here.

The privacy choice is valid for up to 180 days. Analytics cookies are also set to a maximum of 180 days. Google's retention period for measurement data is a separate account setting that still needs confirmation. No confirmed retention periods have been supplied for emails received, demo requests or server logs. Before publication, a period or specific deletion criteria will be added for each category, including backups and any statutory retention requirements. We do not present unconfirmed periods here as company policy.

7. Your privacy rights

You can request access, correction, deletion or restriction of processing of your personal data. Where applicable, you can object, request data portability and withdraw consent. These rights depend on the processing and any legal exceptions.

Send your request to [email protected]. Tell us which data or contact you mean. Do not immediately send a copy of your ID; if verification is needed, we will discuss a suitable method.

A privacy request should generally receive a response within one month. If an extension is necessary, you will be informed within that month. You can also lodge a complaint with the Dutch Data Protection Authority.

8. Employee data in Cherry People

This is a marketing website. You do not manage an employee account or personnel file here. Personal data in the Cherry People platform is covered by separate agreements with the organisation using it, including a data processing agreement where required.

For questions about your employee data, contact your employer or HR department first. Platform roles, security arrangements, providers and retention periods must be described in that separate documentation.

9. Changes and contact

If the website or data processing changes, this notice will be updated. The date of the latest update is shown at the top. You can report privacy questions or suspected unsafe use via [email protected].