At CuliQuiz we treat your personal data with care. This policy explains what data we collect, why, and what rights you have under the General Data Protection Regulation (GDPR).

1. Who we are

CuliQuiz B.V.
Vlielandstraat 2, 1506 ZK Zaandam, Netherlands
CoC 92064213 — VAT NL865871358B01
Email: info@culiquiz.nl

CuliQuiz is the data controller for the data collected via this website.

2. What data we process

  • Contact data — when you fill out a form: name, company, email and the content of your message.
  • Technical data — anonymised IP, browser and device type, pages visited, referring URL.
  • Behavioural data — clicks, scroll depth, form submissions and other interactions (only with your consent).

3. Why we use this data

  • Answering enquiries — to follow up on your contact request.
  • Site operation and security — to keep the site stable, safe and fast.
  • Analytics and improvement — to understand how visitors use the site (with consent for "Statistics").
  • Marketing and retargeting — to show relevant ads via partners (with consent for "Marketing").

4. Legal basis

  • Consent (Art. 6(1)(a) GDPR) — for cookies and trackers in Statistics and Marketing categories.
  • Contract performance (Art. 6(1)(b) GDPR) — to respond to your request.
  • Legitimate interest (Art. 6(1)(f) GDPR) — for site operation, security and fraud prevention.

5. Cookies and trackers

We load no cookies or trackers until you give consent via our cookie banner. You can adjust your choice at any time via the Cookie settings link in the footer.

Category 1 — Necessary (always on)

Essential for basic site functionality. Stores your cookie choice and language preference. No third-party transfer.

Category 2 — Statistics (after consent)

  • Vercel Analytics — cookieless page views and load times. Provider: Vercel Inc., USA.
  • Google Analytics 4 (ID: G-5Y4GQWX2W1) — visitor and session statistics with anonymised IP. Provider: Google Ireland Ltd., Ireland.
  • Zoho SalesIQ — live chat widget and visitor tracking for customer service. Provider: Zoho Corporation B.V., the Netherlands (EU data centre).
  • Microsoft Clarity (ID: wlryoe0sms) — heatmaps and session recordings for UX improvement. Provider: Microsoft Corporation, USA.

Category 3 — Marketing (after consent)

  • LinkedIn Insight Tag (Partner ID: 8485786) — ad targeting and measurement on LinkedIn. Provider: LinkedIn Ireland Unlimited Company, Ireland.
  • Meta Pixel (ID: 986148519536894) — ads and retargeting on Facebook and Instagram. Provider: Meta Platforms Ireland Ltd., Ireland.
  • TikTok Pixel (ID: D7S87K3C77U4TTGIGRSG) — ad measurement on TikTok. Provider: TikTok Information Technologies UK Ltd. and TikTok Technology Ltd., Ireland.
  • Google Ads — conversions flow via the linked GA4 property to Google Ads. Provider: Google Ireland Ltd., Ireland.

6. International transfers

Some partners (Vercel, Google, Microsoft, Meta, TikTok) process data (partially) outside the European Economic Area. We rely on appropriate safeguards such as the European Commission’s standard contractual clauses and the EU-US Data Privacy Framework.

7. With whom we share data

  • Hosting and infrastructure: Vercel Inc. and Cloudflare, Inc.
  • CRM and lead follow-up: Zoho Corporation B.V. (Zoho CRM, EU data centre).
  • Form email handling: Formsubmit.
  • Analytics and advertising partners: as listed under "Cookies and trackers".

We do not sell personal data.

8. Retention

  • Contact requests and CRM records: up to 7 years after last contact (tax obligation).
  • Cookie choice: 12 months in your browser.
  • Anonymised analytics: up to 14 months (GA4 default) up to 26 months (Clarity default).
  • Server logs: maximum 30 days.

9. Your rights

Under the GDPR you have the right to:

  • Access your data.
  • Rectification of inaccurate data.
  • Erasure ("right to be forgotten").
  • Restriction of processing.
  • Object to processing, especially direct marketing.
  • Data portability — receive your data in a common format.
  • Withdraw consent — via Cookie settings or by emailing info@culiquiz.nl.
  • Lodge a complaint with the Dutch Data Protection Authority.

10. Security

We protect your data with appropriate technical and organisational measures: HTTPS encryption, restricted access and periodic audits. Should a data breach occur, we follow the 72-hour notification duty.

11. Changes

We may update this policy when laws, our services or our partners change. The date at the top reflects the last update. Significant changes will be communicated actively.

12. Questions?

Email us at info@culiquiz.nl. We respond within five business days.