Privacy Policy

Data Controller

birdcjlm B.V. is the data controller for the personal data we process. We are registered in the Netherlands under company number 78149263 and our VAT number is NL842916503B01.

Data Collection

The data we collect includes personal information that you provide directly to us and information that we collect automatically when you visit our website or use our services.

Information You Provide:

• Contact information (name, email address, phone number, company name)
• Communication preferences and marketing consent
• Information in correspondence and communications with us
• Information provided when requesting services or consultations
• Feedback, survey responses, and testimonials

Information We Collect Automatically:

• Website usage data and analytics information
• IP address, browser type, and device information
• Cookies and similar tracking technologies (see our Cookie Policy)
• Pages visited, time spent on our website, and referral sources

How We Use Your Data

We explain how we use your information to provide our services, improve our website, and communicate with you about our consulting offerings and business updates.

We use your personal data for:

• Providing management consulting services and responding to inquiries
• Processing and managing client engagements and contracts
• Communicating with you about our services and business matters
• Improving our website, services, and customer experience
• Complying with legal obligations and regulatory requirements
• Marketing our services (with your consent where required)
• Analysing website usage and performance for optimisation

Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Contractual necessity: To perform our consulting services and fulfil contractual obligations
• Legitimate interests: To operate our business, improve our services, and maintain client relationships
• Consent: For marketing communications and certain cookies (where required)
• Legal obligations: To comply with applicable laws and regulations

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your data in the following circumstances:

• With trusted service providers who assist in delivering our services
• When required by law, court order, or regulatory authority
• To protect our rights, property, or safety, or that of our clients
• In connection with a business transfer or merger (with appropriate safeguards)
• With your explicit consent for specific purposes

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, and resolve disputes.

• Client data: Retained for the duration of our business relationship plus 7 years for legal and tax purposes
• Marketing data: Until you withdraw consent or we determine it's no longer needed
• Website analytics: Typically retained for 26 months
• Correspondence: Retained for 3 years unless ongoing business relationship requires longer retention

Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data in certain circumstances
• Right to restrict processing: Request limitation of how we use your data
• Right to data portability: Request transfer of your data in a structured format
• Right to object: Object to processing based on legitimate interests or for marketing
• Right to withdraw consent: Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at privacy@birdcjlm.top. We will respond to your request within one month.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Staff training on data protection and security practices
• Secure data backup and recovery procedures

International Data Transfers

We primarily process data within the European Economic Area (EEA). If we transfer your data outside the EEA, we ensure adequate protection through:

• European Commission adequacy decisions
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules or certification schemes
• Your explicit consent for specific transfers

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience and analyse website performance. For detailed information about our cookie usage, please see our Cookie Policy.

You can manage your cookie preferences through your browser settings or our cookie consent banner.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of any material changes by:

• Posting the updated policy on our website with a new effective date
• Sending email notifications for significant changes (where we have your email address)
• Providing prominent notice on our website

We encourage you to review this Privacy Policy regularly to stay informed about how we protect your personal data.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out using the contact information below:

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we have not handled your personal data appropriately.