Privacy Policy

Purpose

This Privacy Statement ("Privacy Statement") outlines how we handle your personal data when you use our website, www.cmathleticdigital.com, as well as any related websites, mobile apps, or online services that reference this Privacy Statement (collectively referred to as the “website”).

• The website is operated by CM AthleticDigital, a private company incorporated under the laws of the Netherlands, with its registered office in Amsterdam at Keizersgracht 520H, 1017EK Amsterdam, Netherlands, and listed in the Dutch Chamber of Commerce under registration number 98170392.

• When you visit or interact with our website as a visitor, potential business partner, client, or job applicant, we act as the data controller in accordance with applicable data protection laws.

• A " Controller" is a person or legal entity that determines, either alone or jointly with others, the purposes and means of processing personal data.

Importance of personal data protection

At CM AthleticDigital, we understand that processing personal data carries significant responsibilities, for both our organization and the individuals whose data we handle. To ensure transparency and uphold our commitment to data protection, we have adopted this Privacy Statement as part of our approach to privacy compliance.

• This Privacy Statement outlines our general practices regarding privacy and data protection specifically in relation to the use of our website(s). In some situations, we may provide separate or additional privacy notices that apply to the collection and use of specific types of personal data.

• We encourage you to read this Privacy Statement alongside any other privacy notices, policies, or communications we may provide at specific points of data collection or processing. For example, when a job candidate becomes an employee, or a prospect becomes a client. These documents work together to give you a complete understanding of how and why we process your personal data. This Privacy Statement is meant to complement, not replace, those additional notices.

Which personal data do we collect?

Personal data refers to any information that relates to an identified or identifiable individual. This does not include data that has been anonymized and cannot be traced back to a specific person.

• Special categories of personal data refer to sensitive information such as your race or ethnic origin, religious or philosophical beliefs, sexual life or orientation, political views, trade union membership, health information, and genetic or biometric data. The processing of such data is generally prohibited unless a specific legal exception applies.

• At CM AthleticDigital, we do not typically collect or process special categories of personal data through our website. Such data will only be processed when required by applicable laws and in accordance with relevant legal grounds.

• Please see below which categories of personal data we collect:

  • Contact and enquiry submission data, such as your first name, last name, profession, email address, country and personal message you submit for new business enquiries.

  • Candidate Identification data, such as your full name, date of birth, address, phone number, CV details and any information you submit during your application.

  • Marketing and communications data, such as when you receive and open our marketing communications, the events you attend, and your preferences regarding marketing and communication. Further details about the personal data we process for marketing purposes are provided within the marketing messages we send you.

  • Usage data, which refers to the information about your use of our website, our electronic portals and platforms, as well as our local area networking facilities (including WiFi) and similar electronic services, such as interactions with our mobile applications, information collected progressively when you visit our Website, electronic portals and platforms, including your referral website, pages you visit, actions you take, information on last viewed/visited site and details of the content viewed including when and how many times the content was viewed, patterns of page visits, time details per visits (e.g. visit duration, number of visits, time spent on each page, frequency of visits), details about the path followed with special reference to the sequence of pages visited, interactions, functionalities and modules used, and chat messages.

  • Technical data, which refers to the technical information collected when you access our website, digital platforms, or electronic portals provided by us or used in agreement with you. This may include your IP address or device domain name, login credentials, browser type and version, Uniform Resource Identifier (URI), time zone and location settings, browser plug-in details, operating system, platform, and other device-specific technologies. This information is primarily collected through first-party cookies, which allow us to gather analytics, remember your language preferences, measure site traffic and user engagement, and carry out other functions aimed at enhancing your experience on our website(s).

  • CCTV and physical security data, including CCTV footage and other information relating to access of our facilities obtained through electronic means, such as swipe card records, or visitor logbook (applicable for when you visit some of our offices).

• Please be aware that we may also generate and use aggregated, anonymized, or de-identified data to evaluate, enhance, and develop our website, business operations, products, and services, or for other research and analytical purposes. Since this type of data does not, and cannot, identify any specific individual, it is generally not subject to the limitations outlined in this Privacy Statement.

Data collection

We collect personal data from and about you using various methods, including the channels outlined below. Your Enquiries: When you submit a form on our website, contact us via email, post, or our digital platforms, speak with us by phone or in person, or visit our offices, you may share personal information such as your name, address, company name, email address, and the nature of your enquiry. We use this information for the following purposes:

• Your Enquiries: When you submit a form on our website, contact us via email, post, or our digital platforms, speak with us by phone or in person, or visit our offices, you may share personal information such as your name, address, company name, email address, and the nature of your enquiry. We use this information for the following purposes:

  • Based on our legitimate interest in promoting our services, we process your enquiry to provide relevant information about what we offer.

  • This may involve responding to your message or sending you invitations to events.

  • We may also use your enquiry to take steps toward entering into a service agreement with you, based on your request.

  • You are not required to provide personal details, but please note that without the necessary information, we may be unable to assist you effectively.

• Marketing: We may use your information to send you marketing emails either with your consent or, where appropriate, based on our legitimate interest regarding services or events that are similar to those you’ve previously used or attended. With your permission, we may also deliver personalized content through online advertising.

  • Additionally, we may share your name and contact details with relevant subsidiaries offering similar services, so they can promote their offerings or events to you.

• Recruitment: When you apply for a position through this site, we collect the personal data included in your application. This information may be provided directly by you, obtained from publicly available sources such as LinkedIn, or shared with us by someone who referred you for a potential role.

  • We process your personal data to manage recruitment-related activities based on our legitimate interests. This includes reviewing and assessing your application, arranging and conducting interviews or assessments, evaluating the results, and carrying out other steps necessary in the recruitment and hiring process.

  • We retain your data for twelve (12) months from the date of your application. This allows us to improve our hiring processes and maintain a talent pool. If a new opportunity arises, we may refer to previous applicants who have expressed interest in our company and reach out to explore availability.

• All content submitted to us: If you submit inappropriate content or engage in disruptive behavior while using our website, we may process the personal data contained in your communications to address and prevent such conduct.

• Website Usage and Analytics: Our website uses cookies and similar technologies to collect log data and analytics, such as your IP address, to better understand how visitors interact with the site and to generate statistical insights about website usage.

  • We process this data to analyze user behavior, such as identifying the regions from which visitors access our site (e.g., by aggregating IP addresses to estimate country-level access). This helps us compile reports and enhance the performance and relevance of our website. In compliance with privacy standards, IP anonymization is enabled by default in Google Analytics 4 (GA4), meaning IP addresses are not stored or used to track individual users.

  • We also use Google Consent Mode, which adapts the behavior of Google tags on our website according to your consent preferences. GA4 respects these settings and collects data accordingly.

  • This processing is based on our legitimate interest in improving and personalizing the website experience. You can adjust your cookie preferences at any time via our cookie settings. However, disabling certain cookies may impact website functionality or limit access to specific features.

  • Please note that this data is used exclusively in aggregate form and is stored anonymously. It is not used to create personal profiles.

• Publicly Available Sources:When appropriate and necessary, we may collect personal data from publicly accessible sources, including:

  • Public registers of individuals, businesses, charities, legal and financial professionals, or regulated entities, for purposes related to legal and regulatory compliance.

  • Online professional platforms, such as LinkedIn, especially in the context of recruitment or employment, where you have made such information publicly available.

Subprocessors

• When you interact with CM AthleticDigital (e.g., by visiting our website, submitting a form, or working with us as a client, partner, or candidate), your personal data may be processed by the following trusted third-party service providers (“subprocessors”) that we use to support our operations:

How do we use your personal data?

We process your personal data only when we have a valid legal basis to do so. This means your data will only be handled in the following circumstances:

• To fulfil a contract: when it is necessary to perform a contract with you or to take steps at your request before entering into one;

• To meet a legal or regulatory obligation: when we are required to do so by applicable laws or regulations;

• With your consent: where you have given us clear permission to process your data;

• For our legitimate interests, provided these are not overridden by your fundamental rights and freedoms. Examples include:

  • Executing contracts with clients or partners;

  • Managing and operating global support systems (e.g., IT infrastructure);

  • Enhancing our website, services, reporting, marketing, customer engagement, and analytics;

  • Detecting and preventing fraud;

  • Ensuring physical, IT, and network security.

In some cases, we may rely on more than one legal basis for processing your personal data, depending on the specific purpose. If you would like more information about the legal grounds we rely on in a particular situation, please contact us at contact@cmathleticdigital.com.

Your rights in relation to personal data

You have the following rights over the way we process personal data relating to you:

• Right to be informed: You have a right to be informed about how we will use and share your personal data, and to request a copy of the data we are processing about you

• Right to access: You have a right to obtain confirmation of whether we are processing your personal data, access to your personal data and information regarding how your personal data is being used by us

• Rectification of inaccurate data: You have a right to have any inaccurate or incomplete personal data rectified

• Right to erasure and right to be forgotten: You have a right to request that certain personal data held by us is erased. The right to be forgotten is the right to have public data deleted. This may also include a request to restrict the use of or to stop processing your personal data

• Right to restrict processing in certain circumstances: You have a right to block the processing of your personal data in certain circumstances. This right arises if you are disputing the accuracy of personal data, if you have raised an objection to processing, if processing of personal data is unlawful and you oppose erasure and request restriction instead or if the personal data no longer is required by us but you require the personal data to be retained to establish, exercise or defend a legal claim

• Data portability: You can request a machine-readable copy of your personal data, which you can use with another service provider, also known as the right to data portability. Where it is technically feasible, you can ask us to send this information directly to another provider if you prefer

• Right not to be subject to automated decisions: You have a right not to be subject to a decision which is based on automated processing where the decision will produce a legal effect or a similarly significant effect on you

• Right to object: You can make a complaint to us, or to your local data protection authority. You may raise your concerns with your local data protection authority directly, but we would encourage you to contact us in the first instance as we aim to promptly, efficiently and satisfactorily resolve any concerns or complaints you may have in relation to our processing of your personal data

• Right to withdraw your consent: If we have your consent, the GDPR (if applicable) and other applicable data protection laws give you the right to withdraw your consent. You can do this at any time by contacting us

We aim to comply without undue delay, and within one calendar month at the latest. Occasionally it may take us longer than one calendar month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated. Please send your requests to contact@cmathleticdigital.com.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.