Privacy Policy

Version: September 22, 2025

1. Contact details

Cadeo B.V.
Herengracht 575, 1017 CD Amsterdam
Chamber of Commerce: 91280907
Contact person: Anthonia Wolleswinkel
Email address: support@cadeo.gift

2. When do we process which personal data?

Contact

When we are in contact with each other, we process the following (depending on how we communicate):

  • first and last name
  • company name, if applicable
  • email address
  • and/or phone number
GDPR basis: legitimate interest · Retention period: indefinite, but never longer than necessary
Quotation

To prepare a quotation, we process your:

  • first and last name
  • company name
  • address details
  • email address
  • phone number
  • signature (if the quotation is signed)
GDPR basis: performance of the agreement · Retention period: at least 7 years (legal retention obligation for financial administration)
Ordering gifts

When you order a gift, we process:

  • the recipient's name
  • the recipient's company name, if applicable
  • the recipient's address details (for a physical gift)
  • the recipient's email address
  • your name and email address
  • your logo, photo, video, or other personal data that you add yourself, if applicable
GDPR basis: performance of the agreement · Retention period: indefinite, but no longer than necessary
Receiving gifts (without an account)

When you receive a gift without creating an account, we process:

  • your email address (for a digital gift)
  • your address details, if applicable (to receive a physical gift)
  • personal data that you may include in the thank-you note
GDPR basis: performance of the agreement · Retention period: indefinite, but no longer than necessary
Business account

When you create an account as a business, we process:

  • your name and email address
  • your phone number, if applicable
  • your Chamber of Commerce number and VAT number (for invoices)
  • a photo for your account, if applicable

Visible in your account are: order numbers, cards, thank-you notes, recipients' address details, track & trace numbers, and invoices.

GDPR basis: performance of the agreement · Retention period: indefinite, but no longer than necessary
Consumer account

When you create an account as a consumer, we process:

  • your name and email address
  • your phone number and photo, if applicable
GDPR basis: performance of the agreement · Retention period: indefinite, but no longer than necessary
Cadeo studio

Your account includes the Cadeo studio. There you can create and save your own templates. For this, we only process what you upload yourself: your logo, a video/photo, or personal data included on the saved templates.

GDPR basis: performance of the agreement · Retention period: as long as you keep it uploaded yourself, otherwise until one month after the end of the collaboration
Automatic SMS updates for orders

When you want to receive SMS updates, we process your phone number and name.

GDPR basis: consent · Retention period: as long as SMS updates are enabled
Customer overview

We keep a customer overview for support and to see which services have been provided to which customers. For this, we process all relevant personal data stored in your account.

GDPR basis: legitimate interest · Retention period: indefinite, but never longer than necessary
Video testimonials

When you record a video testimonial for our website, we process your name, company name, and the video.

GDPR basis: consent · Retention period: as long as our website is online or until we no longer want to use the review
Sending corporate gifts

When we send you a corporate gift as a customer or business contact, we process your name, company name if applicable, email address, or address details.

GDPR basis: legitimate interest · Retention period: indefinite, but no longer than necessary
Invoicing / financial administration

For invoicing, we process your name, company name, address details, customer number, invoice number, bank details, Chamber of Commerce number if applicable, and email address.

GDPR basis: legal obligation · Retention period: at least 7 years (legal retention obligation)
Newsletter

For the newsletter, we process your first name and email address. You can unsubscribe at any time.

GDPR basis: consent · Retention period: as long as you remain subscribed
Other email marketing

When you have purchased a product/service, we may send you emails to offer similar services. We process your first name and email address.

GDPR basis: consent · Retention period: until you unsubscribe
Job applications

When you apply for a job, we process your name, email address, and the personal data in your CV and/or cover letter.

GDPR basis: legitimate interest · Retention period: up to 4 weeks after the vacancy closes
Employee photos on website

When you are an employee with us, your name and a photo will appear on our website.

GDPR basis: consent · Retention period: until you are no longer an employee
Tagging on social media

Sometimes we tag you on social media. For this, we use your social media account name.

GDPR basis: legitimate interest · Retention period: as long as the post is online
Complaints

When you file a complaint, we process your name, email address or phone number, and the complaint and how it was handled.

GDPR basis: legitimate interest · Retention period: indefinite, but never longer than necessary

Legitimate interest — For some purposes, we process personal data on the basis of "legitimate interest." In doing so, our interest in processing your personal data is weighed against your privacy interests. We only process personal data if our legitimate interest outweighs your interest.

3. Recipients of your personal data

Your data is not shared with third parties unless this is necessary for business operations or legally required. The third parties to whom we may have provided your data:

  • TransIP
  • Vercel
  • Heroku
  • WordPress
  • Google (Calendar, Tag Manager, Gmail, etc.)
  • Website plugins
  • Exact
  • Sendgrid
  • Mailchimp
  • Clerk
  • AWS
  • Suppliers

We do not sell your data to third parties.

4. Transfers to third countries

We try to process personal data within the European Economic Area (EEA) as much as possible. It is possible that we use services from outside the EEA. We only do this if there is an adequate level of protection.

5. Security of your personal data

We have taken appropriate technical and organizational measures to secure personal data. Measures taken include:

  • Using an SSL certificate on our website
  • Working with two-factor authentication
  • Making backups
  • Updating software, plugins, and operating systems
  • Logging in only on secure networks
  • Using strong passwords, changed regularly
  • Signing NDAs
  • Signing data processing agreements

6. Automated decision-making

We do not use automated decision-making.

7. Cookies

Cookies are small files that are placed on your device when you visit a website. We use the following types of cookies:

Functional cookies — Necessary for the website to function properly. These have no impact on your privacy and we do not need to ask for permission to use them.

Analytical cookies (anonymized) — These allow us to keep statistics. We do not process IP addresses, so we do not need to ask for permission. Basis: legitimate interest.

Targeting cookies — These track your visit and build a profile. We need your consent for these. The following cookies are placed after your consent:

Cookie Domain Cookie type Retention period
intercom-device-id-eix2dqxf .cadeo.nl first party 8 months and 4 weeks
_fbp .cadeo.nl first party 2 months and 4 weeks

8. Your rights

Under the General Data Protection Regulation, you have the following rights:

Right of access, rectification, and erasure — You have the right to know which personal data we process about you, have it corrected, or have it deleted.

Right to restriction of processing — You have the right to (temporarily) stop the processing of your personal data.

Right to object — If we process your data because of "legitimate interest" and you do not agree, you can object.

Right to data portability — You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

Right to withdraw your consent — When we have obtained your consent, you can withdraw it at any time.

Right to file a complaint — You have the right to file a complaint with the Dutch Data Protection Authority.

Would you like to exercise one of these rights? Then email support@cadeo.gift.

9. Changes

We may update this privacy policy from time to time. The latest version will always be published online. If the changes apply to you, we will inform you about them.

Ervaar Cadeo zelf in eigen huisstijl

We sturen je gratis een échte Cadeo op, volledig gepersonaliseerd. Zo zie je precies hoe jouw ontvangers het beleven.

Ontvangen! 🎁

We sturen je snel een Cadeo!