Privacy Policy

1. Introduction

This Privacy Policy applies to all personal data processing activities carried out by Meier Media B.V. ("Meier Media", "we", "us", "our"), a private limited company (Besloten Vennootschap) incorporated under Dutch law. We provide media buying intelligence, marketing cost optimization and media deal sourcing services to businesses.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the Dutch GDPR Implementation Act (Uitvoeringswet Algemene Verordening Gegevensbescherming) and other applicable data protection legislation.

By using our website, contacting us or entering into a business relationship with us, you acknowledge that you have read and understood this Privacy Policy. We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a new "last updated" date.

2. Contact Details

The data controller responsible for the processing of your personal data is:

• Company: Meier Media B.V.
• Address: Schiedamse Vest 154, 3011BH Rotterdam, Netherlands
• Chamber of Commerce (KVK): 80869246
• Establishment number: NL861831718B01
• Email: contact@meiermedia.agency
• Website: meiermedia.agency

For any questions about this Privacy Policy or our data processing activities, or to exercise your data protection rights, please contact us at contact@meiermedia.agency.

3. What Personal Data Do We Process?

Depending on the nature of your interaction with us, we may process the following categories of personal data:

3.1 Contact and identification data

• Full name
• Business email address
• Phone number
• Company name and job title
• Business address

3.2 Business information

• Monthly marketing spend range
• Media channels used
• Industry and company size
• Details provided via contact forms or enquiries

3.3 Technical and usage data

• IP address
• Browser type and version
• Operating system
• Referring website
• Pages visited and duration of visit
• Date and time of access

3.4 Communication data

• Content of emails and messages sent to us
• Records of telephone conversations (where notified)
• Meeting notes and correspondence

3.5 Financial data

• Billing and invoicing details
• Bank account information (for payment processing)
• VAT identification numbers

4. Purposes and Legal Basis

We process your personal data for the following purposes, based on the corresponding legal grounds under the GDPR:

4.1 Performance of a contract (Article 6(1)(b) GDPR)

• Providing our media buying intelligence, cost optimization and deal sourcing services
• Communicating with you about our services, including responding to enquiries
• Managing client relationships and contracts
• Processing invoices and payments
• Delivering reports, analyses and recommendations

4.2 Legitimate interest (Article 6(1)(f) GDPR)

• Improving our website, services and user experience
• Analysing website usage to identify trends and optimize performance
• Protecting our systems and network against fraud and security threats
• Marketing our services to prospective clients (business-to-business only)
• Establishing, exercising or defending legal claims

4.3 Legal obligation (Article 6(1)(c) GDPR)

• Complying with tax, accounting and financial reporting obligations
• Responding to lawful requests from public authorities
• Maintaining records as required by Dutch law

4.4 Consent (Article 6(1)(a) GDPR)

• Placing non-essential cookies on your device (see Section 8)
• Sending marketing communications where consent is required by law

Where we rely on consent, you have the right to withdraw it at any time (see Section 10).

5. Sharing with Third Parties

We do not sell, rent or trade your personal data. We may share your personal data with the following categories of recipients, only to the extent necessary:

• Service providers: hosting providers, email services, analytics tools and other service providers that process data on our behalf under a data processing agreement.
• Professional advisors: accountants, auditors and legal advisors, subject to confidentiality obligations.
• Media partners: to the extent necessary for the execution of our services, and only with your knowledge and as required to negotiate or secure media deals on your behalf.
• Public authorities: when required by law or a court order.
• Business transfers: in connection with a merger, acquisition, reorganisation or sale of assets, subject to appropriate confidentiality arrangements.

Where we engage third-party processors, we ensure that appropriate data processing agreements are in place that meet the requirements of Article 28 GDPR. We do not transfer personal data outside the European Economic Area (EEA) unless adequate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or an adequacy decision.

6. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, loss or destruction. These measures include, but are not limited to:

• Encryption of data in transit (TLS/SSL) and at rest where appropriate
• Access controls and authentication mechanisms
• Regular security assessments and updates
• Confidentiality agreements with employees and contractors
• Secure hosting with reputable providers within the EEA
• Regular backups and disaster recovery procedures

While we strive to protect your personal data, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee the absolute security of your data.

7. Retention Periods

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations. Our general retention periods are:

• Client data: for the duration of the business relationship and up to seven (7) years afterwards, in line with Dutch fiscal retention requirements.
• Enquiry and contact form data: up to two (2) years after the last contact, unless a business relationship is established.
• Financial and tax records: seven (7) years, as required by Dutch tax law (Algemene Wet inzake Rijksbelastingen).
• Website analytics data: up to twenty-six (26) months.
• Communication records: for the duration of the business relationship and up to two (2) years afterwards.

After the applicable retention period, personal data is securely deleted or anonymised.

8. Cookies

Our website uses cookies and similar technologies. Cookies are small text files placed on your device when you visit our website.

8.1 Strictly necessary cookies

These cookies are essential for the operation of our website and do not require your consent. They include cookies necessary for security, session management and basic website functionality.

8.2 Analytics cookies

We may use analytics cookies to understand how visitors interact with our website, helping us improve its content and performance. We only place analytics cookies with your consent, unless they qualify as privacy-friendly analytics under Dutch Telecommunications Act (Telecommunicatiewet) guidelines.

8.3 Managing cookies

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. Most browsers allow you to:

• View what cookies are stored on your device and delete them individually
• Block cookies from particular websites or all websites
• Block third-party cookies
• Clear all cookies when you close your browser

9. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data. You can exercise these rights by contacting us at contact@meiermedia.agency.

• Right of access (Article 15): You have the right to obtain confirmation as to whether we process your personal data and, if so, to request access to that data along with supplementary information about how it is processed.
• Right to rectification (Article 16): You have the right to have inaccurate personal data corrected and to have incomplete personal data completed.
• Right to erasure (Article 17): You have the right to request the deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent.
• Right to restriction of processing (Article 18): You have the right to request the restriction of processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or when the processing is unlawful.
• Right to data portability (Article 20): You have the right to receive your personal data in a structured, commonly used and machine-readable format and to transmit that data to another controller, where processing is based on consent or a contract and is carried out by automated means.
• Right to object (Article 21): You have the right to object to the processing of your personal data based on our legitimate interests. We will stop processing your data unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms.
• Right not to be subject to automated decision-making (Article 22): You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you. We do not currently use automated decision-making.

We will respond to your request within one (1) month of receipt. This period may be extended by a further two (2) months where necessary, taking into account the complexity and number of requests. We will inform you of any such extension within one month of receipt of the request.

We may ask you to verify your identity before acting on your request. We will not charge a fee for handling your request, except where requests are manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse to act on the request.

10. Withdrawing Consent

Where we process your personal data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To withdraw your consent, you can:

• Send an email to contact@meiermedia.agency
• Use the unsubscribe link in any marketing communications
• Adjust your cookie preferences through your browser settings

We will process your withdrawal request without undue delay. Where consent is the sole legal basis for processing, we will stop the relevant processing activities promptly upon receiving your withdrawal.

11. Complaints

If you believe that our processing of your personal data infringes the GDPR or other applicable data protection legislation, we encourage you to contact us first at contact@meiermedia.agency so we can try to resolve your concern.

You also have the right to lodge a complaint with a supervisory authority. The competent supervisory authority in the Netherlands is:

• Autoriteit Persoonsgegevens (Dutch Data Protection Authority)
• Bezuidenhoutseweg 30, 2594 AV Den Haag
• P.O. Box 93374, 2509 AJ Den Haag
• Telephone: +31 (0)70 888 8500
• Website: autoriteitpersoonsgegevens.nl

12. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will update the "last updated" date at the top of this page and, where appropriate, notify you by email or through a prominent notice on our website.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. Your continued use of our website or services after any changes to this Privacy Policy constitutes your acceptance of those changes.

Contact

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

• Meier Media B.V.
• Schiedamse Vest 154, 3011BH Rotterdam, Netherlands
• Email: contact@meiermedia.agency
• Website: meiermedia.agency