Privacy Policy of North Sea Demand ABM B.V.
This Privacy Policy explains how North Sea Demand ABM B.V. (“we”, “us”, “our”) collects, uses, shares, stores, and protects personal data in connection with our account-based-marketing services and related activities. We are committed to processing personal data in a lawful, fair, transparent, and secure manner, and to respecting the rights of individuals whose data we process.
1. Introduction and company information
The controller responsible for the processing of personal data is:
- North Sea Demand ABM B.V.
- Keizersgracht 555, 1017 DR Amsterdam, Netherlands
- Email: [email protected]
- Phone: +31 20 794 68 23
We operate as an account-based-marketing business and may process personal data in connection with lead generation, customer relationship management, campaign personalization, analytics, business communications, and the delivery of our services to clients and prospects.
2. Data collection and processing
We may collect and process the following categories of personal data, depending on your relationship with us and the context in which you interact with us:
- Identification and contact details: name, job title, company name, business email address, business phone number, postal address, and similar contact information.
- Professional information: role, department, seniority, industry, company size, and publicly available professional profile information.
- Communication data: emails, contact form submissions, meeting notes, chat messages, and other correspondence.
- Marketing and engagement data: website interactions, campaign responses, content downloads, event participation, and communication preferences.
- Technical data: IP address, browser type, device information, operating system, log data, and cookies or similar technologies.
- Contractual and billing data: invoicing details, service history, payment-related information, and contract records where applicable.
We generally obtain personal data directly from you, from your employer, from publicly available sources, from business partners, or from third-party data providers where permitted by law. Where required, we will inform you when data is mandatory or optional and the consequences of not providing it.
3. Purpose of data processing
We process personal data for the following purposes:
- to provide and manage our account-based-marketing services;
- to identify and research potential business clients and relevant decision-makers;
- to communicate with prospects, clients, and partners;
- to personalize outreach, campaigns, and content;
- to manage customer and supplier relationships;
- to maintain and improve our website, communications, and services;
- to analyze campaign performance and business development activities;
- to comply with legal, regulatory, tax, accounting, and administrative obligations;
- to establish, exercise, or defend legal claims;
- to detect, prevent, and address fraud, misuse, or security incidents.
Where appropriate, we may also process data for internal reporting, quality assurance, training, and service optimization.
4. Legal basis for processing
We process personal data only where we have a valid legal basis. Depending on the situation, the legal basis may include:
- Performance of a contract: when processing is necessary to enter into or perform a contract with you or your organization;
- Legitimate interests: when processing is necessary for our legitimate business interests, such as business development, account-based marketing, service improvement, fraud prevention, and internal administration, provided that these interests are not overridden by your rights and freedoms;
- Consent: where we rely on your informed consent, for example for certain marketing communications or optional cookies, if required by applicable law;
- Legal obligation: when processing is required to comply with applicable laws or regulations;
- Vital interests: in rare circumstances where processing is necessary to protect someone’s vital interests;
- Public interest or official authority: where applicable under relevant law.
Where we rely on legitimate interests, we will assess and balance our interests against your privacy rights and take appropriate safeguards.
5. Data sharing and third parties
We may share personal data with the following categories of recipients, strictly where necessary and subject to appropriate safeguards:
- Service providers: hosting providers, IT support, CRM providers, analytics providers, email delivery services, and security vendors;
- Business partners and clients: where needed to deliver services, manage campaigns, or coordinate business communications;
- Professional advisers: lawyers, accountants, auditors, insurers, and consultants;
- Authorities and regulators: where required by law, court order, or lawful request;
- Corporate transaction counterparties: in connection with mergers, acquisitions, restructuring, financing, or sale of assets, subject to confidentiality obligations.
We do not sell personal data in the ordinary sense unless explicitly permitted by applicable law and properly disclosed. Any third party receiving personal data from us is expected to protect it and use it only for the specified purpose.
6. Data transfer to third countries
Depending on the tools and service providers we use, your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) or outside your country of residence. Where such transfers occur, we will take appropriate safeguards to protect your data, which may include:
- adequacy decisions issued by relevant authorities;
- standard contractual clauses or equivalent transfer mechanisms;
- supplementary technical, contractual, or organizational measures where necessary;
- reliance on other lawful transfer mechanisms permitted by applicable law.
Where appropriate, you may contact us to request more information about the safeguards used for international transfers.
7. Storage duration
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, reporting, and business requirements. The retention period depends on the type of data, the purpose of processing, and any applicable legal obligations.
- Prospect and marketing data: retained for as long as relevant for business development and, where applicable, until you object or unsubscribe, subject to legal limitations;
- Client and contract data: retained for the duration of the contractual relationship and thereafter for the period necessary to meet legal obligations or defend legal claims;
- Financial and tax records: retained for the legally required period;
- Technical and security logs: retained for a limited period unless longer retention is required for investigation, security, or legal reasons.
When personal data is no longer needed, we will delete, anonymize, or securely archive it in accordance with applicable law and our retention practices.
8. User rights
Subject to applicable law, you may have the following rights in relation to your personal data:
- Access: the right to obtain confirmation as to whether we process your personal data and to receive a copy of that data;
- Rectification: the right to request correction of inaccurate or incomplete personal data;
- Erasure: the right to request deletion of your personal data in certain circumstances;
- Restriction: the right to request that we limit the processing of your personal data in certain situations;
- Data portability: the right to receive certain personal data in a structured, commonly used, machine-readable format and, where technically feasible, to have it transmitted to another controller;
- Objection: the right to object to processing based on legitimate interests and the right to object at any time to processing for direct marketing purposes.
To exercise these rights, please contact us using the details below. We may need to verify your identity before responding. We will respond within the timeframe required by applicable law and may refuse a request where lawful grounds apply.
9. Withdrawal of consent
Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. If you withdraw consent, we may no longer be able to provide certain optional features, communications, or services that depend on that consent.
You can withdraw consent by following the instructions provided at the time consent was given or by contacting us at [email protected].
10. Right to complain
If you believe that our processing of your personal data infringes applicable law, you have the right to lodge a complaint with the relevant supervisory authority in your country of residence, place of work, or place of the alleged infringement. If you are located in the Netherlands, you may contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
We encourage you to contact us first so that we can try to resolve your concern directly and promptly.
11. Data security
We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures may include:
- access controls and role-based permissions;
- encryption or pseudonymization where appropriate;
- secure storage and transmission protocols;
- monitoring and logging of relevant systems;
- staff confidentiality obligations and privacy training;
- regular review of security practices and vendor safeguards;
- incident response and breach management procedures.
Although we work to protect your personal data, no method of transmission or storage is completely secure. We therefore cannot guarantee absolute security.
12. Contact information
If you have any questions, requests, or concerns about this Privacy Policy or our processing of personal data, please contact:
- North Sea Demand ABM B.V.
- Keizersgracht 555, 1017 DR Amsterdam, Netherlands
- Email: [email protected]
- Phone: +31 20 794 68 23
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations. When we make material changes, we will take reasonable steps to notify you, such as by posting the updated policy on our website or by other appropriate communication methods.
The updated version will become effective on the date indicated or when posted, unless stated otherwise. We encourage you to review this Privacy Policy periodically to stay informed about how North Sea Demand ABM B.V. processes personal data.