Cuego privacy policy

01

Introduction

Cuego attaches great importance to the privacy of our users. This privacy policy describes how we collect, use, share and protect personal data when you use our services and website.

Cuego, registered at 't Hagelkruis 39, 6026 BB Maarheeze, the Netherlands, listed with the Dutch Chamber of Commerce (KVK) under number 87023202, VAT ID NL864180044B01, is the data controller for the personal data described in this policy.

02

Which data we collect

We collect the following categories of personal data:

• Contact details: name, email address, phone number, company name
• Account data: username, password (encrypted), profile information
• Usage data: how you use our services, IP address, browser type
• Communication data: messages you send through our platform

03

What we use your data for

Each purpose has its own legal basis under the GDPR:

• Providing our services, including entering into and performing the agreement (performance of a contract, art. 6(1)(b))
• Communication about your account and our services (performance of a contract, art. 6(1)(b))
• Customer service and technical support (performance of a contract, art. 6(1)(b))
• Securing the platform and preventing misuse (legitimate interest, art. 6(1)(f))
• Analysis and improvement of our services and the user experience (legitimate interest, art. 6(1)(f))
• Website visitor analytics on www.cuego.io, only after your consent via the cookie banner (consent, art. 6(1)(a))
• The free customer contact scan: if you enter a website URL (and optionally an email address to receive the report), we use this to prepare and send the scan result (consent, or legitimate interest in sending the report, art. 6(1)(a) or (f))
• Outreach: we may approach businesses with commercial email as part of customer acquisition. Every email includes an opt-out (legitimate interest, art. 6(1)(f))
• Compliance with legal obligations, such as tax retention requirements (legal obligation, art. 6(1)(c))

04

How long we keep your data

We do not keep personal data longer than necessary for the purposes for which it was collected, or as long as the law requires. Invoice data is subject to the statutory Dutch tax retention period of 7 years. When the agreement ends, your data is deleted or returned on request, see the relevant provision in our terms and conditions.

05

Who we share your data with

To deliver our services we engage subprocessors, such as hosting providers and AI vendors. The current list of subprocessors, their role and country of establishment is available on our security page.

06

Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. This includes encryption and access controls, among other measures. Your data is stored within the European Economic Area. Where data is processed outside the EEA for AI processing, this happens exclusively with carefully selected partners and under a valid transfer mechanism.

07

Cookies

On your first visit we ask which cookies you allow. Necessary cookies are always on; analytics and marketing cookies stay off until you switch them on yourself. You can change or withdraw that choice at any time via ‘Cookie settings’ at the bottom of every page.

For analytics and marketing we use Google Tag Manager and Google Analytics. These tags are blocked by default through Google Consent Mode and only fire after you consent. If you do consent, this may involve processing by Google outside the EU, on the basis of the EU-US Data Privacy Framework.

Even without consent we keep an anonymised visit counter: per day we count how often a page was viewed, along with the referring domain, the country and the type of device. Nothing is stored on or read from your device and we keep no IP address, so this count cannot be traced back to you.

The chat widget on our site is functional: it loads so you can ask us a question. If you start a conversation, that conversation is stored so we can display and answer it. The widget does not track you across other websites. It does remember, through local storage in your browser, a session counter and any details you entered in the contact form before a conversation, so you do not have to type them again.

A full overview of the individual cookies and their retention periods is available in our cookie policy.

08

Your rights

Under the GDPR you have the following rights:

• The right to access your personal data
• The right to rectification of incorrect data
• The right to erasure (“right to be forgotten”)
• The right to restriction of processing
• The right to data portability
• The right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), in addition to or instead of a complaint with Cuego itself