Stichting Circle Economy is hosting and running this website. All data collection and management carried out through this website and associated communication products is done in accordance with Circle Economy’s data protection policy. This can be read in full below.

Effective date: May 12, 2025

Last updated: May 12, 2025

Document Version: 1.0

Circle Economy Foundation (“we”, “us” or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit our website https://www.circle-economy.com or any other websites that are offered by us (the “Website”), use any of our products or services, communicate with us through any channel, participate in surveys, feedback, marketing events or campaigns in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable privacy laws and regulations.

About us

Circle Economy Foundation

Company registration number: 52051048

Haarlemmerweg 331 1051 LH, Amsterdam, the Netherlands

info@circle-economy.com

Data Protection Officer (DPO): Mihail Bashev, mihail@circle-economy.com

WHAT DATA DO WE COLLECT?

We may collect and process the following categories of personal data:

Personal Identification Information

a. Full name

b. Email address

c. Company name

d. Company type and/or industry

e. Your company role

f. Your region

g. Your gender

h. Preferred language

i. Learning objectives

j. Inquiry details

Technical Data

a. IP address

b.User Agent (e.g. browser type and version, device type, operating system)

Usage Data

a. Pages visited

b. Time spent on pages

c. Click-through data

d. Navigation paths

e. Downloads

Marketing & Communication Preferences

a. Opt-in status

b. Communication preferences

c. Interaction history with emails and campaigns

d. Language preferences

Cookies and Tracking Technologies

a. We use cookies and other similar tracking technologies. Please, refer to our Cookie Policy for more information

Special Category Data

a. We do not collect any special categories of data (e.g. racial or ethnic origin, health status, biometric data, etc.) unless explicitly required for legal reasons or with explicit consent.

HOW DO WE COLLECT YOUR DATA?

We collect data in the following ways:

1. Direct interactions – when you fill out forms, contact us, register on any of our websites, or subscribe to our service
2. Automated technologies – via cookies and other analytic tools
3. Third-party sources – such as advertising networks, analytic providers and social media platforms

We ensure data minimisation principles apply to all our processing operations.

Lawful basis for collecting and processing personal data

We only process your personal data where a lawful legal basis applies, including:

1. Consent – when you have given your explicit consent for processing
2. Contractual necessity – to fulfill a pre-contractual request
3. Legal obligation – to comply with applicable legal requirements
4. Legitimate interest – for purposes such as improving our services, delivering a more personalised experience, preventing fraud and marketing, unless these are not overridden by your rights
5. Purposes and Legal Bases for Processing Personal Data
1. Account setup, login and subscriptions: Contractual necessity – Art. 6(1)(b)
2. Newsletter and promotional materials: Consent Art. 6(1)(a)
3. Website analytics: Legitimate interest – Art. 6(1)(f)
4. Legal compliance (e.g. audits): Legal obligation – Art. 6(1)(c)
5. Customer support and contact forms: Legitimate interest – Art. 6(1)(f)
6. Fraud detection and security monitoring: Legitimate interest – Art. 6(1)(f)

If we rely on consent for processing your data, you may withdraw it at any time without affecting the lawfulness of prior processing.

We use cookies in compliance with the GDPR with a lawful basis of either consent or legitimate interest. Types of cookies we use:

Functional cookies

• Purpose: Improve general performance and functionality of the website. For example, to allow easy login or remember a user’s region.
• Retention: Depending on the purpose of the types of cookies, it can vary from session-only to up to 10 years (depending on browser settings).

Analytics / Performance cookies

• Purpose: Track website visitors and their user behaviour. For example, to improve the way the website works and, in turn, enhance user experience.
• Retention: Depending on the purpose of the types of cookies, it can vary from session-only to up to 2 years.

Marketing cookies

• Purpose: Track user behavior for advertising and social media purposes. For example, collecting data on interactions, preferences, and habits.
• Retention: After 7 days, data will be made pseudonymous and stored for another 180 days.

You can manage or withdraw cookie consent via our Cookie Consent Banner or through your browser’s settings. You can find the full cookie details in our Cookie Policy.

We welcome your feedback on the accessibility of the Circle Economy website. If you encounter any accessibility barriers, please let us know:

• Email: mihail@circle-economy.com
• Postal address: Circle Economy Foundation, Haarlemmerweg 331, 1051 LH, Amsterdam, the Netherlands

We try to respond to feedback within 15 business days from the date of receipt of the enquiry by the responsible person listed above. Please, note that fixing any issues could take from 3 to 6 months.

We may share your data with:

1. Processors: Hosting providers (AWS, TransIP, Webflow, Digital Ocean), email delivery service providers (Mailchimp, Node mailer, Bird), analytics tools (Google Analytics, Microsoft Clarity, Hotjar, Google Tag Manager)
2. Legal authorities: Only when legally obliged or lawfully required to do so
3. Business transfer: In the even of a merger, acquisition or asset transfer‍
4. Affiliates and Partners: Subject to the appropriate agreements and compliance

If we transfer your data outside of the European Economic Area (EEA), such transfers are subject to:

1. Adequacy decisions from the European Commission
2. Standard Contractual Clauses
3. Binding Corporate Rules where applicable

We assess transfer risks and maintain documentation per Schrems II guidance.

We retain your personal data only for as long as necessary for the purposes set out in this policy and to meet legal, regulatory, tax, accounting or reporting requirements. After the retention periods, your data is securely deleted or anonymised.

Under the GDPR, you have the following rights:

1. Access – Request access to your personal data
2. Rectification – Request correction of inaccurate data
3. Erasure – Request deletion of your data if it is no longer needed
4. Restriction – Limit processing under certain conditions
5. Data Portability – Receive your data in structured and commonly used format
6. Object – Object to processing for direct marketing or legitimate interests
7. Withdraw Consent – At any time, where consent is used as the legal basis
8. Lodge Complaint – With the relevant Data Protection Authority (DPA)

To exercise your rights, email: mihail@circle-economy.com

Your data matters to us, which is why we apply strict data minimization across our organisation. We collect and retain only the essential personal information required. Our information security policy is built around compartmentalization and the principle of least privilege, with regular access log auditing of our technical infrastructure.

In the event of a data breach, we will notify affected individuals and regulators within 72 hours, as required by Articles 33–34 GDPR.

If you believe your rights under the GDPR have been violated, you may contact:

AP - Autoriteit Persoonsgegevens

Website: https://www.autoriteitpersoonsgegevens.nl/en

Telephone: (+31) - (0)88 - 1805 250

Visiting address: Hoge Nieuwstraat 8, 2514 EL The Hague

We may update this policy from time to time to reflect changes in law or operations. Any changes will be posted on this page and where appropriate, notified by email.

Last updated: May 12, 2025

Previous versions: Available upon request

For any questions, concerns or complaints regarding this Privacy Policy, contact our DPO:

Name: Mihail Bashev

Email: mihail@circle-economy.com

Phone: +359877190323 | +31642699788