Privacy Policy of Varoderu Holding B.V.

1. Who is responsible

Varoderu Holding B.V., based in IJsselstein, the Netherlands, and registered with the Dutch Chamber of Commerce under number 83206175, is the controller for the processing of personal data through our websites and apps. You can reach us at info@varoderu.nl.

2. Scope

This policy applies to:

• the website varoderu.nl;
• the websites of our trade names, including verlanglootje.nl and catchmeonline.nl;
• the mobile apps published by Varoderu Holding B.V. on the Apple App Store and Google Play.

Where a specific app or service involves additional processing, we explain this in the app or on the website of that service.

3. What data we process

Website varoderu.nl

This website is informational and uses no cookies, advertising networks or third-party analytics tools. Our hosting provider processes technical server data (such as IP address, time and requested page) to keep the website secure and available. These logs are kept for a short period.

Contact by email

If you email us, we process your email address, your name if you provide it, and the content of your message in order to answer your question.

Websites and apps of our brands

Our services only process data needed to make the service work. Depending on the service this may include:

• data you enter yourself, such as a name, email address, wish list or player name;
• technical data, such as device type, operating system, language setting and an anonymous installation identifier;
• usage data required for the service to function, such as scores, progress or settings.

We only request access to device features (such as microphone, camera or notifications) when a feature you use requires it, and only after you have granted permission through the operating system.

4. Purposes and legal bases

• Providing the service (performance of a contract): delivering the features of our websites and apps.
• Answering questions (legitimate interest): handling your message.
• Security and stability (legitimate interest): preventing abuse and resolving incidents.
• Legal obligations: for example tax retention requirements for paid services.
• Consent: for processing that requires your consent, such as access to device features. You can withdraw consent at any time.

5. Sharing with third parties

We do not sell personal data. We only share data with parties needed to deliver our services:

• hosting and infrastructure providers with whom we have a data processing agreement;
• Apple and Google as operators of the app stores, for distribution, purchases and crash reports under their own terms;
• public authorities where we are legally required to do so.

Where data is processed outside the European Economic Area, we ensure appropriate safeguards, such as the European Commission's standard contractual clauses.

6. Retention

We do not keep personal data longer than necessary for the purpose for which it was collected. Email correspondence is kept for a maximum of two years after the matter is closed. Account data is deleted when you close your account or when an account has not been used for an extended period. Technical logs are usually deleted within 30 days. Data subject to a statutory retention period is kept for as long as the law requires.

7. Security

We take appropriate technical and organisational measures to protect personal data, such as encrypted connections (HTTPS), access restrictions and up-to-date software.

8. Children

Our services are not directed at children under 16. We do not knowingly collect personal data from children without the consent of a parent or guardian. If you believe this has happened, please contact us so we can delete the data.

9. Your rights

Under the General Data Protection Regulation (GDPR) you have the right to access, rectify and erase your data, to restrict processing, to data portability and to object to processing. Send your request to info@varoderu.nl. We respond within one month. To prevent abuse we may ask you to verify your identity.

In our apps you can also remove your data by deleting the app; where a service has accounts, we offer a way to delete the account in the app or on the website.

10. Complaints

If you are unhappy with how we handle your data, we would like to hear from you. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

11. Changes

We may update this privacy policy, for example when we launch new services or when legislation changes. The current version is always available at varoderu.nl/en/privacy/. We will inform you of significant changes through the relevant service.

12. Contact

Varoderu Holding B.V.
Chamber of Commerce (KvK) no. 83206175
IJsselstein, the Netherlands
info@varoderu.nl

Our full registered address is listed on our contact page.