Privacy Statement innOVeet

Version dated September 8, 2026

innOVeet Nederland B.V. processes personal data from visitors to this website. In this statement, you can read about what data we collect, why we process it, the legal basis for doing so, how long we retain it, and what rights you have.

What This Statement Is About

This statement pertains to visiting and using this website. It does not pertain to:

• the processing of customer and client data in connection with a contract;

• the processing of job applicants' data;

• the secure SaaS environment in which clients manage their 3D configurator. That environment is separate from this website and has its own privacy policy;

• innOVeet ’s 3D configurators that are embedded on our clients’ websites. In this context, the relevant client is the data controller, and innOVeet acts as the data processor. The privacy policy of the website on which you use the configurator applies to that processing.

Who is responsible for the processing?

The data controller within the meaning of Article 4(7) of the GDPR is:

If you have any questions about privacy or would like to exercise your rights, please contact our privacy officer at info@innoveet.nl.

What Personal Data We Process

When you fill out and submit a form on our website, we process:

• first and last name;

• phone number;

• email address;

• company name;

• the content of your message.

In addition, we collect data about website usage during each visit:

• information about your activities on our website, such as pages visited, duration of visits, and click behavior;

• the type of web browser, operating system, and device;

• your IP address and the cookie or user identifiers set by the services listed below;

This usage data has been pseudonymized: we do not link it to your name ourselves, but it can be linked to an individual device or profile and is therefore considered personal data.

Sensitive Personal Data and Minors

We do not process any special categories of personal data within the meaning of Article 9 of the GDPR, nor any criminal records within the meaning of Article 10 of the GDPR, through this website.

Our website is intended for business visitors and does not intend to collect data from visitors under the age of sixteen, unless they have obtained consent from a parent or guardian (Article 8 of the GDPR in conjunction with Article 5 of the GDPR Implementation Act). We are unable to verify a visitor’s age. If you believe we have collected data about a minor without such consent, please contact us at info@innoveet.nl; we will then delete that information.

Purposes, Principles, and Retention Periods

We process your personal data exclusively for the purposes listed below and on the legal basis specified therein under Article 6(1) of the GDPR.

Once a retention period has expired, we delete the data or make it irreversibly anonymous.

Cookies and Similar Technologies

A cookie is a small text file that is stored on your computer, tablet, or smartphone when you visit the website. We use three categories.

For the categories of statistics and marketing, we only place cookies after you have given your consent via the cookie banner. You can change or withdraw your consent at any time through the cookie settings on this website. Withdrawal applies going forward; any processing that took place prior to the withdrawal remains lawful.

You can also block cookies or delete previously stored cookies through your browser settings. Please note that the website may not function properly if you do so.

What cookies we and our partners place

Below is a list of the cookies set by the services we use. Names and expiration dates may be changed by the parties involved; you can always find the current and complete list in the cookie settings on this website.

Required

Statistics

Marketing

Sharing with Others

We share your personal data with others only when necessary for the purposes listed above or to comply with a legal obligation. We do not sell your data.

We enter into a data processing agreement with parties that process data exclusively on our behalf, pursuant to Article 28(3) of the GDPR, which sets forth the same level of security and confidentiality.

A different arrangement applies to the advertising platforms. LinkedIn and Meta also process the data they receive via our website for their own purposes and are therefore joint controllers with us within the meaning of Article 26 of the GDPR. We have a joint controller arrangement in place with both of them. The core principle is always the same: innOVeet is responsible for obtaining your consent and for the information in this statement, while the platform is responsible for further processing on its own systems and for handling requests related thereto. Google acts as an independent data controller for advertising services alongside innOVeet.

You can also exercise your rights directly with each of these parties. If you wish, we can help you forward your request.

Transfer Outside the European Economic Area

Some of the parties mentioned above process data in or transfer data to the United States. This transfer takes place pursuant to the European Commission’s Adequacy Decision of July 10, 2023, regarding the EU-U.S. Data Privacy Framework, provided that the organization in question is certified under that framework. In addition, standard contractual clauses established by the European Commission, as referred to in Article 46(2)(c) of the GDPR, have been agreed upon with these parties.

You can request a copy of the guarantees used by emailing info@innoveet.nl.

Automated Decision-Making

innOVeet does not make decisions that produce legal effects or have similarly significant effects on individuals based solely on automated processing, as referred to in Article 22 of the GDPR.

Your Rights

Under the GDPR, you have the following rights:

• the right to access the personal data we process about you (Article 15);

• correction of inaccurate or incomplete information (Article 16);

• deletion of your data (Article 17);

• Restriction of processing (Article 18);

• the right to data portability for data you have provided, in a commonly used file format (Article 20);

• objection to processing based on a legitimate interest (Article 21);

• Withdrawal of your consent at any time. This does not affect the lawfulness of the processing prior to the withdrawal (Article 7(3)).

You can send a request to info@innoveet.nl. We will respond within one month of receipt. If your request is complex or if we receive a large number of requests at once, we may extend that period by two months; we will notify you of this within the first month (Article 12(3) of the GDPR).

To prevent us from disclosing data to the wrong person, we generally process your request using the email address we have on file. Only if there is reasonable doubt about your identity will we ask for additional information necessary to verify it (Article 12(6) of the GDPR). We will never ask you to send us a copy of your ID.

File a Complaint

If you disagree with the way we handle your data, please let us know at info@innoveet.nl. You also always have the right to file a complaint with the Dutch Data Protection Authority (Article 77 of the GDPR), via autoriteitpersoonsgegevens.nl or by mail: Dutch Data Protection Authority, P.O. Box 93374, 2509 AJ The Hague.

How We Protect Your Data

innOVeet takes appropriate technical and organizational measures to prevent misuse, loss, unauthorized access, unintended disclosure, and unauthorized alteration, as required by Article 32 of the GDPR. These include, among other things:

• Traffic to and from our website is encrypted using TLS;

• Access to personal data is limited to employees who need it for their work;

• We have entered into data processing agreements with suppliers who process data on our behalf;

• We periodically review our measures and adjust them as needed.

If you feel that your data is not properly secured or if there are signs of misuse, please contact us at info@innoveet.nl.

Changes to this statement

We may update this privacy statement, for example, when we begin offering new services or when laws and regulations require us to do so. The most current version is always available on this page, with the version date listed at the top. We will actively notify you of any significant changes.