How and why does Yiruma B.V. collect personal data?

Yiruma B.V. collects personal data in the course of its activities. In most cases, this concerns data that it requests from the data subject or that the data subject provides voluntarily. Examples include an initial telephone conversation between Yiruma B.V. and a (potential) customer or a situation in which a (potential) customer sends an email to Yiruma B.V.

Yiruma B.V. takes the utmost care when processing personal data. Transparency is an essential part of this care. Yiruma B.V. considers it important that third parties and data subjects understand how it uses personal data and the reasons behind this. That is why it has drawn up this statement. If you have any questions or comments after reading this Statement, please contact Yiruma B.V. This also applies if you wish to exercise one of the rights described below or if you have a complaint. The full address and name of the contact person can be found at the bottom of this statement.

Who exactly is Yiruma B.V.?

Yiruma B.V. is responsible for the processing of personal data. It is registered with the Chamber of Commerce under number 96848383, located at Van Nesstraat 17, 2024 DK in Haarlem, and can be reached by telephone on 06-28766491 and by email at info@yiruma.co.

Does Yiruma B.V. have a Data Protection Officer?

Yiruma B.V. has not appointed a Data Protection Officer. However, it has designated an employee who serves as the first point of contact for matters relating to privacy and personal data. This is Mr P. Van den Berg. The full address can be found at the bottom of this statement.

What personal data does Yiruma B.V. process and why does it do so? 

Yiruma B.V. processes various types of personal data for various reasons. The data it processes most frequently are:

Identification details (name, email address, contact person, telephone number, Chamber of Commerce number)

Location details (postal and/or business address)

Financial details (bank account number, payment details).

When processing job applications, Yiruma B.V. also processes additional data, namely

Family composition, education and training

When you visit the Yiruma B.V. website, it also processes other data than those mentioned above. This may include:

Information about the device, location, software usage, and similar details.

The primary purpose of this processing is to enable us to enter into an agreement with the customer. To do so, Yiruma B.V. and the customer must be able to communicate with each other. This includes, for example, identifying the customer's requirements and preparing a quotation.

The second main objective is to be able to implement the agreement that has been concluded. This includes, for example, periodic consultations on progress. 

The third main objective is to enable invoicing for the work or services provided, as well as to facilitate payment (and, if necessary, debt collection).

The fourth main objective is to carry out marketing activities with the aim of attracting more customers or increasing brand awareness.

The final main objective is to be able to inform the customer about developments that may be relevant to him or her.

Mág Yiruma B.V. that process data?

Yiruma B.V. processes personal data when necessary to establish or execute an agreement with a customer and/or supplier. This is the case, for example, when a quotation is requested, when an order is placed, or when Yiruma B.V. itself places an order. Furthermore, Yiruma B.V. processes personal data if its own interests justify this. This will be the case if it is reasonably impossible for Yiruma B.V. to carry out its activities without processing this data. Finally, in some cases, Yiruma B.V. (also) requests permission to use the data. 

The legal basis(es) for processing are therefore:

1.That processing is necessary for the performance of a contract to which the data subject is party, or is carried out at the request of the data subject prior to entering into a contract.

2.That processing is necessary for the purposes of the legitimate interests pursued by Yiruma B.V. (or a third party).

3.The data subject has given consent to the processing.

With regard to category (2), in all cases this concerns processing that is necessary for Yiruma B.V. to be able to provide its services. It simply cannot do its work, it cannot communicate, it cannot issue quotations, etc. without using the customer's personal data. It therefore has a legitimate interest in such processing. Yiruma B.V. believes that this interest should take precedence when weighed against the interests of the data subject. There are two reasons for this. Firstly, Yiruma B.V. knows from experience that such processing does not generally encounter any objections. Yiruma B.V. therefore takes this as its starting point. Secondly, the fact that Yiruma B.V. does not retain the data for longer than necessary. Nevertheless, in order to respect the rights of the data subject as much as possible, Yiruma B.V. only uses the data that is necessary to achieve the purpose. 

With regard to category (3), consent may be withdrawn at any time without giving reasons.

Will that personal data also be shared with others?

In some cases, Yiruma B.V. will share personal data with parties with whom it collaborates. These are known as ’processors’. Yiruma B.V. has entered into agreements with these processors. These agreements serve to ensure that these processors (just like Yiruma B.V. itself) handle this data with care. For example, under these agreements, the processor is obliged to ensure proper security, to treat the data confidentially and to destroy the data.

Yiruma B.V. does not intend to share personal data with parties other than processors. At most, it anticipates that, in isolated cases, information may be shared with (another) employee of the customer or with parties that have a direct relationship with the customer.  

Will the personal data remain in Europe?

In this context, we refer to the European Economic Area (EEA). This consists of the EU countries, plus Norway, Liechtenstein and Iceland. All countries outside this area are considered ‘third countries’. In some cases, Yiruma B.V. transfers personal data to third countries, in particular the US. This only happens if it has been explicitly established at European level that an adequate level of personal data protection is guaranteed in the country concerned. With regard to the US, we only transfer data to parties that are certified under the EU-US Privacy Shield.

How long will the data be stored?

Yiruma B.V. stores the data it collects for varying periods of time, depending on the category of data and the manner in which it was collected. The exact periods are recorded in the register of processing activities that Yiruma B.V. has drawn up.

When determining the applicable retention periods, Yiruma B.V. first took into account the statutory (minimum) retention periods. These include the statutory obligation to retain accounting information. Furthermore, Yiruma B.V. has, where possible, aligned itself with the retention periods included in the Wbp Exemption Decree. For example, with regard to customer contact details, a retention period of up to one year after the termination of the relationship between the parties applies. Finally, Yiruma B.V. has been guided by its own interests and those of its customers in determining the retention periods. For example, it may be important for both parties that documents in which (further) agreements are laid down are retained for longer than two years. If such documents (e.g. email correspondence) contain personal data, this data will also be retained.

What are my rights?

According to the law, you are a ‘data subject’ and data subjects have a number of specifically defined legal rights. You can submit a request to Yiruma B.V. to view, receive, change or delete your personal data. You may also object to the (further) processing of your data. If Yiruma B.V. processes your personal data on the basis of your consent, you may withdraw that consent at any time. For all these matters and for any other questions, please contact:

Yiruma Limited.

Mr P. Van den Berg

info@yiruma.co

Yiruma B.V. will respond to your message within one month. If you believe that Yiruma B.V. is acting in violation of applicable laws and regulations regarding personal data, you can submit a complaint to the Data Protection Authority (Postbus 93374, 2509 AJ The Hague).

Does Yiruma B.V. use automated decision-making?

No automated decision-making takes place at Yiruma B.V.  

What else do I need to know?

1. In order to implement a sound privacy policy, Yiruma B.V. has drawn up a register of all the ways in which it processes personal data. For each type of processing, the purpose, basis and retention period are included, among other things. If you feel that this Privacy Statement does not provide you with sufficient information, you can request access to that register.

2. Yiruma B.V. has taken appropriate technical and organisational measures to protect your personal data. A description of these measures is also included in the processing register. Yiruma B.V. periodically assesses whether these measures are still adequate.

3. Yiruma B.V.'s privacy policy also covers matters unrelated to its relationships with its customers. For example, there is also a retention period for data relating to job applicants.

4. Yiruma B.V. ensures that all its employees are familiar with its privacy policy and that they are also aware of its importance. All employees are obliged to keep personal data confidential.

5. From time to time, it will be necessary to amend this Statement. Yiruma B.V. reserves the right to do so. We recommend that you check this Statement occasionally for any changes.

Version 1.0 dated 7 October 2025.