Privacy Policy

Introduction

Nestpod ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website nestpod.de and nestpod.eu, use our services, or interact with our lactation privacy solutions.

Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Fill out contact forms or request information about our products
• Request a space assessment or proposal
• Schedule a visit to one of our pilot locations
• Subscribe to our newsletter
• Apply for a position at Nestpod

This information may include your name, email address, company name, phone number, job title, and any other information you choose to provide.

Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device and browsing behavior, including:

• IP address and general location data
• Browser type and version
• Pages visited and time spent on pages
• Referring website addresses
• Device information (operating system, screen resolution)

How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide customer support
• Process your requests for proposals, assessments, or visits
• Send you marketing communications (with your consent)
• Improve our website, products, and services
• Analyze website usage and optimize user experience
• Comply with legal obligations and protect our rights
• Prevent fraud and ensure security

Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for marketing communications or newsletter subscriptions
• Contractual necessity: To fulfill our obligations when you request our services
• Legitimate interests: To improve our services, analyze website usage, and pursue business development
• Legal obligations: To comply with applicable laws and regulations

Information Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Service providers: Third-party vendors who assist us with email delivery, website hosting, analytics, and customer relationship management
• Business partners: When necessary to fulfill your requests (e.g., facility managers at pilot locations)
• Legal authorities: When required by law or to protect our rights and safety
• Business transfers: In connection with a merger, acquisition, or sale of assets

Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights:

• Right to access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data ("right to be forgotten")
• Right to restrict processing: Request limitation of how we use your data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us at [email protected]. We will respond to your request within 30 days.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience and analyze website traffic. You can control cookie preferences through your browser settings. For more information, please see our Cookie Policy.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we will securely delete or anonymize it.

International Data Transfers

Your information may be transferred to and processed in countries outside the EEA. When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a new "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Supervisory Authority

If you are located in the EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).