Privacy Policy Website

Information about the processing of personal data — Articles 12-14 GDPR

Version: 2.1 — Date: June 2026

Who are we?

Avendar B.V. (hereinafter: "Avendar", "we" or "us") is responsible for processing your personal data via the website https://avendar.com.

In this privacy statement we inform you about our processing of your personal data in our role as data controller. To the extent that we process your personal data as a processor on behalf of another controller, that controller can provide you with information about the processing of your personal data.

Controller: Avendar B.V.
Address: Sint Janssingel 92, 5211 DA, 's-Hertogenbosch
Chamber of Commerce (KvK) number: 96316101
Website: https://avendar.com/
Email: privacy@avendar.com

Which personal data do we process?

Avendar processes your personal data in the performance of our services. We process personal data that you provide to us yourself and personal data that we receive about you from others.

Below is an overview of the personal data we process:

• First and last name;
• Phone number;
• Email address;
• Company name or the name of your organization;
• Job title;
• Where applicable, data about your use of our website and our software;
• Business contact data that we receive from external (public and commercial) sources, such as name, job title, company name, business email address and business phone number.

For what purposes do we process personal data?

We may process your personal data for the following purposes, depending on our relationship with you.

Contact

On our website you can find the contact details through which you can reach us with questions about our services. We process your name, job title and the company name or the name of your organization in order to correspond with you and answer your questions. Depending on how you contact us, we also process your email address and/or phone number. We additionally use this data to maintain contact with you about our services. We process your personal data for this purpose on the basis of our legitimate interest in being able to carry out the activities of our business and in being able to offer our services to you as a potential customer.

It is also possible to schedule an appointment directly via our website. For this we use the services of Cal.com, which facilitates our digital calendar. If you schedule an appointment, we process your name, email address and any personal data you include in the additional notes. If you add guests to the appointment, we process their email address.

In principle we retain your personal data for a maximum of 12 months after our last contact with you. This retention period may be longer in the event that your company or organization starts using our software, which we elaborate on under the heading Entering into an agreement.

Acquisition of new customers

In order to find and approach new business customers, we process business contact data of potentially interested companies and their contact persons. This concerns your name, job title, company name, business email address and business phone number. We obtain this data through an enrichment and lead-generation platform that compiles business contact data from public sources and commercial data providers. We process only business contact data and approach you in your professional capacity. We process your personal data for this purpose on the basis of our legitimate interest in promoting our services to relevant business contacts and in being able to carry out the activities of our business. You have the right to object to this processing at any time; in that case we will cease processing your personal data for this purpose.

We retain this personal data for a maximum of 12 months. If you indicate that you do not wish to be approached, or if no contact is established within this period, we will delete your data.

Entering into an agreement

For our services we enter into agreements with companies and organizations that wish to use our software. If you are a contact person of a company or organization, we process your name, job title, email address, phone number and the company name or name of your organization. By processing this data we can fulfill our obligations under the agreement and carry out our services. We have a legitimate interest in this, namely Avendar's interest in being able to carry out the activities of our business, in maintaining contact with our customers, and in complying with our legal and contractual obligations.

We retain your personal data for this purpose for a maximum of 7 years after the agreement for which you are our contact person has ended.

Vacancies

If you apply for a vacancy with us or submit an open application, we process the personal data you provide to us. This may include the following categories of personal data:

• Name and address details;
• Contact details, namely email address and phone number;
• CV;
• Any photo you add yourself;
• Any information we receive from your references;
• Any other information you provide to us yourself.

In order to fill our vacancies, it is necessary for us to process the personal data of applicants who wish to go through our application process. If you do not provide us with this personal data, it may be that your application is not processed and you cannot go through the application process.

We delete your personal data in the context of an application no later than four weeks after the completion of the application, unless we have obtained your consent to retain this data for a further maximum of one year. We may then use your data to inform you of any new vacancies that we consider to match your profile.

In the event that we employ you, we process your personal data for, among other things, the preparation and performance of your work for Avendar. We will inform you further about this at that time.

Use of our website and cookies

We are interested in the use of our website and collect and analyze usage statistics thereof. For this and other purposes we use cookies and similar technologies. A cookie is a small text file that is stored on your device when you visit our website.

We use the following categories of cookies:

• Functional/necessary cookies: these are required for the proper functioning and security of our website. No consent is required for these.
• Analytical cookies: these allow us to measure and analyze the use of our website in order to improve it.
• Marketing/tracking cookies: these allow us to track behavior in order to make our services and communication more relevant.

You can manage, refuse or delete cookies via your browser settings. Please note that disabling certain cookies may affect the functioning of our website.

Suppliers

In order to provide our services we make use of suppliers. We process the name, email address and, where applicable, the phone number of contact persons at suppliers in order to be able to contact our suppliers.

Legal obligations

We may be legally obliged to retain certain personal data for longer. We have a statutory administrative obligation under which we must retain our invoicing records for at least seven years.

Sharing personal data with third parties

Avendar shares your personal data with third parties only if this is necessary for the performance of an agreement or to comply with any legal obligations that rest on us.

To the extent that we engage processors who process your personal data on our behalf and on the basis of our written instructions, we conclude a data processing agreement with them to ensure that they handle your personal data with the same care as we do. We require them to comply with the same obligations as those that rest on us. Avendar remains responsible for these processing operations by processors. We engage processors for our hosting, our customer management system, our administration, our email and calendar management, the enrichment of business contact data and the finding of new customers, and the management and maintenance of our internal IT systems.

In the event that we wish to provide your personal data to other third parties, we will first ask for your consent.

Your rights regarding your personal data

You have the right to view, correct or delete the personal data we process about you. In addition, you have the right to object to our processing of your personal data and the right to request restriction of our processing of your personal data. You also have the right to data portability. This means that you can submit a request to us to send the personal data we hold about you in a computer file to you or to an organization designated by you.

To the extent that we process your personal data on the basis of your prior consent, you have the right to withdraw that consent, after which we will no longer process your personal data on this basis. If we have no other basis for processing your personal data, we will delete it.

You can send a request in which you exercise your rights regarding our processing of your personal data to privacy@avendar.com.

To be sure that a request has been made by you, we may ask you questions to confirm your identity. We will respond to your request as soon as possible, but in any event within four weeks. In the event that you have sent us many requests or your request is very complex, we may extend this period by a maximum of two months.

Avendar would like to point out that you have the right to file a complaint with the national supervisory authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). This can be done via the following link: https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons

Security

Avendar takes the protection of your personal data seriously and takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized alteration. If you have the impression that your data is not properly secured or there are indications of misuse, please contact our customer service via privacy@avendar.com.

International transfers

Your personal data is processed both within the European Economic Area ("EEA") and outside it. Should it occur that we process your personal data outside the EEA, we take appropriate security and organizational measures to ensure that your personal data is secure. We ensure that such transfers comply with the GDPR, for example by concluding an agreement with the recipient on the basis of standard contractual clauses adopted by the European Commission, or by transferring the personal data to a country for which the European Commission has issued an adequacy decision.

Changes

This privacy statement may be amended. The most current version can be found at avendar.com/en/privacy. Should we change our processing of your personal data, we will inform you thereof by sending an email notification.