Privacy Statement

This Privacy Statement provides information on the processing of your personal data whenever you visit the website stichd.com (hereinafter “STICHD”, “we” or “us”) in accordance with the EU General Data Protection Regulation (hereinafter “GDPR”).

This privacy statement applies to the use of the websites of STICHD B.V. under the domain: STICHD.COM

Unless otherwise specified in this Privacy Statement, the controller for the processing of your personal data is: STICHD B.V. Oude Hulst 1 . 5211 HC. ‘s-Hertogenbosch. The Netherlands

Please note that in order to exercise your rights regarding data processing you can contacting our Privacy Officer via privacy@stichd.com 

STICHD has appointed a Privacy Officer. STICHD has not appointed a Data Protection Officer within the meaning of Article 37 GDPR.

This Privacy Statement is based on the following terms from the EU General Data Protection Regulation, which we have defined for ease of understanding.  

GDPR refers to the Regulation (EU) 2016/679 of the European Parliament and of the European Council dated 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).

The recipient is a natural or legal person, public authority, agency or any other body to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the context of a particular enquiry, in accordance with Union or Member State law, shall not be regarded as recipients; the processing of such data by public authorities shall comply with the applicable rules on data protection and the purposes of the processing; Examples of possible recipients: IT service providers; for more information see Article 4).

Personal data refers to any information relating to an identified or identifiable natural person ("data subject's personal data"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Examples of personal data: name, contact details, or IP addresses.

The data controller is the natural or legal person, public authority, agency or any other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union law or Member State law, the controller or the specific criteria for its nomination may be determined by Union law or Member State law.For the data processing activities described in this Privacy Statement, STICHD BV is the data controller unless otherwise specified (see Article 1.2.).  

Processing refers to any operation or set of operations which is performed on personal data or on a set of personal data, whether or not by automatic means, such as collection, recording, organisation, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction.

A. PROCESSING OF YOUR DATA WHEN VISITING OUR WEBSITE

If you visit our website in order to find out about our brand without actively transferring information to us (purely for informational purposes), we process your personal data for the following purposes and by virtue of the following legal bases:

B. IT SECURITY

We process your personal data that are technically necessary to allow us to provide our websites to you and to guarantee stability and security when you visit our websites. This includes the following personal data:

• IP address
• Type and version of browser
• Operating system and platform
• The complete Uniform Resource Locator (URL)

C. USE OF COOKIES

On our website we use cookies. Cookies are small text files that are stored in the browsers of your end devices whenever you visit our websites. Through cookies, your actions and settings on our websites can be tracked, stored and recognized for the duration of the browser session or even after this. In addition to this, cookies and their respective cookie IDs allow your browser to be recognized.

For more information about the use of cookies on our websites, the cookie categories and for individual settings please refer to our Cookies Settings. 

If your personal data is processed through cookies or other technical measures that store information on, or retrieve information from, your end device, such processing is based on your consent pursuant to Article 6(1)(a) GDPR and Article 11.7a of the Dutch Telecommunications Act (Telecommunicatiewet). You provide this consent by activating the relevant services via the cookie banner. You may withdraw your consent at any time with effect for the future by deactivating the corresponding services in the cookie settings.

D. GOOGLE TAG MANAGER

On our websites, we use the Google Tag Manager, a service of Google Ireland Limited,  Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The Google Tag Manager enables STICHD to use so-called website tags via a web-based user interface provided to us by Google.

Website tags are "measurement codes and associated code fragments" that can communicate with Tag Manager servers and be configured through a web-based user interface, Google Tag Manager. Google Tag Manager also allows us to resolve other website tags that may also collect data.

In order to provide the service, we set a cookie if you have given consent to the activation of the cookie (Art. 6 para. 1, lit. a GDPR). When using the Google Tag Manager, we use the so called "client-side tagging" variant by Google. Your IP address is not transmitted to Google LLC, which is based in the USA.

In the event that your personal data is transferred to Google LLC in the U.S., Google LLC has taken appropriate measures to ensure compliance with the level of data protection requirements applicable in the European Union or the European Economic Area (e.g. certification in the EU-U.S. Data Privacy Framework adopted by the EU Commission; conclusion of standard data protection clauses). You can find more information about Google Tag Manager on the following Google web pages:

• Google Privacy & Terms
• Privacy Policy
• Google Tag Manager FAQ 
• Terms of Use Google Tag Manager 

E. GOOGLE ANALYTICS

On our websites, we use the Google Tag Manager, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies that allow an analysis to be made on the usage of our websites. This allows us to better analyze your visit and use of our website across different devices.

When using Google Analytics, we use the so called "client-side tagging" variant by Google. Further information can be found in the section on server-side tagging in our Privacy Policy. Your IP address is not transmitted to Google LLC, based in the USA. 

On behalf of STICHD, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, analyzing the effectiveness of our digital advertising and improving its customization, and providing other services relating to website activity and internet usage to STICHD. You can find more information on terms of use and data protection at:

• Google Business Safety
• Google Policies
• Google Privacy
• Google Analytics

The processing of your personal data is based on consent pursuant Art. 6 para. 1 s. 1, lit. a GDPR.

You can give your consent to Google Analytics in our cookie banner. You can revoke this consent at any time with effect for the future by deactivating Google Analytics in our Cookies Settings .

If you do not give us your consent to analyze your data using Google Analytics, we will analyze the usage of our website without tracking your personal data with Google Consent Mode. You can find more information about Google Consent Mode in the corresponding passage of this Privacy Policy.

The analysis of the UTM tags described above is also prevented by deactivating the Google Analytics cookie.

F. GOOGLE CONSENT MODE

f you do not give us your consent to analyze your data using Google Analytics, we will not track your personal data.

In these cases, we use the Google Consent Mode of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Consent Mode allows us to carry out an analysis using so-called modeling, which takes place without the use of cookies and without processing your personal data.

To carry out the so-called modeling, we process the following data without personal reference to your visit to our website: Function-related data (timestamp, user agent, referrer URL), aggregated data (Boolean information on the status of consent, random number when building each separate page, references to information on the ad click in the URL in the user's navigation history of the previous or current page and information on the consent platform used).

Further information on Google Consent Mode can be found at:

• Google Further Support

General information on data protection at Google can be found at the following links: 

• Business Safety
• Google Policies & Privacy

G. CAREERS / JOB APPLICATION

If you want to apply to a vacancy in the “work at STICHD” section, you will be forwarded to our job application platform. For further information on the processing of job applicants’ personal data please refer to the respective Data Protection Statement published under this link:

Privacy-Statement-Applicants-stichd-English_version2.pdf

Further information on Google Consent Mode can be found at:

• Google Adverts

General information on data protection at Google can be found at the following links: 

• Business Safety
• Google Policies & Privacy

We retain your personal data only for as long as is necessary to fulfil the purposes for which it is processed, as described in the relevant sections of this Privacy Statement, unless a longer retention period is required or permitted by law.

Your personal data may be transferred / disclosed to the following categories of recipients:

Other companies within the STICHD within the scope of a group-internal, collaborative process. Such data processing, where applicable, is necessary for the purpose of our legitimate interest to run our administration activities efficiently and collaboratively, and to improve our products and services (Legal basis: Art. 6 para. 1 s. 1, lit. f GDPR).

IT Service providers who prepare the website, databases and tools, issue analyses on user habits on our websites.

In connection with the use of Google Analytic, including tags and cookies, your personal data may be transferred to the USA.

For the analysis of your behaviour on our website, we might transfer your personal data to specialized service providers in third-party countries, if necessary.

In order to offer you localized versions of our websites, we may transfer your personal data to a third-party service provider in the USA.

We ensure that suitable safeguards (e.g., certification in the EU-U.S. Data Privacy Framework adopted by the EU Commission, conclusion of applicable EU Standard Contractual Clauses and, if necessary, additional measures) for adequate data protection are in place, if your personal data is disclosed to any recipients mentioned above, which are established outside the EU/EEA.

If we process your personal data according to Section 2 of this Privacy Statement on the basis of our legitimate interests (Legal basis: Art. 6 (1) sentence 1, lit. f GDPR), you can – without prejudice to, if applicable, specific unsubscribe / opt-out possibilities provided in Section 2 – object to the respective data processings at any time on grounds relating to your particular situation by sending your request to privacy@stichd.com. We will then no longer process your data for this / these purpose(s) unless our legitimate interests in processing outweigh or the processing serves to establish, exercise or defend legal claims.

If you object to the processing of your data, we will process any collected personal data in this context in order to respond to your request. This data processing is necessary for compliance with a legal obligation (Legal basis: Art. 6 (1) sentence 1, lit. c GDPR).

If you have given us permission to process your personal data, you can withdraw this permission at any time. The withdrawal of your consent is effective for the future and does not affect the lawfulness of processing based on consent before the withdrawal. Unless specifically provided for in chapter 2, please send your withdrawal of consent to privacy@stichd.com.

If you withdraw your consent, we will process your personal data collected in this context in order to respond to your request. This data processing is necessary in order to fulfil a legal obligation (legal basis: Article 6(1)(c) GDPR).

In accordance with the GDPR, you may demand at any time that we:

• Provide you with information on your personal data that we process (Art. 15 GDPR),
• Rectify (Art. 16 GDPR),
• Erase (Art. 17 GDPR), 
• Restrict (Art. 18 GDPR) and/or 
• Export (Art. 20 GDPR)

your personal data stored on our systems.

Please send your request, stating at least your first and last name, either by email to privacy@stichd.com or in writing to STICHD B.V., Oude Hulst 1, 5211 HC, ‘s-Hertogenbosch, the Netherlands.

If you exercise these rights against us, we will process your personal data in order to respond to your request. This data processing is necessary for compliance with a legal obligation (Legal basis: Art. 6 para. 1 s. 1, lit. c GDPR).

Irrespective of your abovementioned rights, you can lodge a complaint with a data protection supervisory authority, if you are of the opinion that the processing of your personal data by STICHD violates the GDPR (Art. 77 GDPR).

We reserve the right to change this Privacy statement. In order to keep well informed about the way in which we handle your personal data, we advise you to review this statement from time to time

If you have any questions or comments in response to this privacy statement, please contact our Privacy Officer via privacy@stichd.com

Privacy Statement STICHD, March 2026.