General Data Protection Regulation (GDPR) Compliance Policy

1. Introduction

MMX B.V. (“the Company”), located at Aalsmeerderweg 241-16, 1432CM Aalsmeer, Netherlands, is committed to complying with the General Data Protection Regulation (GDPR) to ensure the protection of personal data. This policy outlines the Company’s approach to data protection, the principles adhered to, and the rights of data subjects.

Company Information:

• KVK: 83991476
• VAT: NL863059570B01
• RSIN: 863059570
• Website: www.mmxbv.nl
• Contact: +31 6 85671317 | contact@mmxbv.com

2. Scope

This policy applies to all personal data processed by MMX B.V. and its employees, contractors, and partners. It covers data collected from clients, employees, suppliers, and any other third parties.

3. Principles of Data Protection

MMX B.V. adheres to the following principles as set out by GDPR:

1. Lawfulness, Fairness, and Transparency: Personal data is processed lawfully, fairly, and transparently.
2. Purpose Limitation: Data is collected for specified, explicit, and legitimate purposes.
3. Data Minimization: Only the data necessary for the intended purposes is collected.
4. Accuracy: Ensures personal data is accurate and kept up-to-date.
5. Storage Limitation: Retains personal data only for as long as necessary.
6. Integrity and Confidentiality: Processes personal data securely to protect against unauthorized access, loss, or damage.

4. Data Collection and Processing

MMX B.V. collects and processes personal data for the following purposes:

• To provide and manage services.
• To communicate with clients and respond to inquiries.
• To comply with legal and regulatory obligations.
• For marketing and promotional activities (with consent).

The lawful bases for processing include consent, contractual necessity, legal obligation, and legitimate interests.

5. Data Subject Rights

Under GDPR, individuals have the following rights:

• Right to Access: Obtain a copy of personal data and information on processing.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure: Request deletion of data under certain conditions.
• Right to Restriction: Limit processing of data under specific circumstances.
• Right to Data Portability: Receive data in a structured, commonly used format.
• Right to Object: Object to data processing for direct marketing or other purposes.
• Right to Withdraw Consent: Withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: File a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

6. Data Sharing and Transfers

MMX B.V. does not sell or trade personal data. Data may be shared with:

• Service providers and contractors for operational purposes.
• Legal or regulatory authorities as required by law.

Any transfer of data outside the EU/EEA is carried out in compliance with GDPR requirements.

7. Data Security

MMX B.V. implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse. These include:

• Encryption and secure storage.
• Regular security assessments.
• Employee training on data protection practices.

8. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Retention periods are reviewed regularly.

9. Data Breach Management

MMX B.V. has a data breach response plan to address incidents promptly. Any data breach is reported to the Autoriteit Persoonsgegevens within 72 hours, if required, and affected individuals are notified where applicable.

10. Contact Information

For questions or requests related to data protection, please contact:

Data Protection Officer (DPO)
Email: contact@mmxbv.com
Phone: +31 6 85671317
Address: Aalsmeerderweg 241-16, 1432CM Aalsmeer, Netherlands

11. Updates to this Policy

This policy is reviewed and updated as needed to reflect changes in operations or legal requirements.