TRACT PRIVACY NOTICE
We are committed to safeguarding and respecting your privacy and providing you with the information, options and choices necessary for you to control how we use your information. That is why in this privacy and cookie notice (“Notice”) we describe how we collect, process and use your personal data. This Notice applies to all personal data we process about you when you visit our website www.tract.eco, use the TRACT platform or otherwise interact with us as described below. We process and protect your personal data (“Personal Data”) as defined by the General Data Protection Regulation (“GDPR”) and the Dutch GDPR Implementation Act with the utmost care. By “you” we refer to any natural person within the scope of this Notice, particularly visitors our website and social media platforms, TRACT Platform users and job applicants. While processing your Personal Data, we comply with requirements imposed by GDPR and other applicable laws and regulations.
Who we are
Tract B.V. is a Dutch private company with limited liability, based at Lighthouse Building, floor 6., Basisweg 32, 1043 AP, Amsterdam, The Netherlands, (hereafter: “TRACT”, “we” and “our”). We process your Personal Data as a data controller which means that the main decisions are made by TRACT about the purposes and means with regard to the processing of Personal Data and we are responsible for the collection and use of your Personal Data as described in this Notice. We may also process your Personal Data related to your access and use of the TRACT Platform on behalf of our customer as a data processor in accordance with the applicable Data Processing Agreement and underlying Master User Agreement we signed with the customer.
Information we collect and process about you
The Personal Data we collect and process, as well as the purpose, will depend on the services provided to you. The legal meaning of the term 'processing' is very broad and includes, among other things: the collection, storage, consultation, use and deletion of personal data. You are free to share your Personal Data with us, however in some cases, if you fail to provide us with the required information, we may not be able to provide you with our services or access to certain information.
We will collect and process Personal Data about you in the following situations:
TRACT Website Visit: we collect information about you when you visit our website (www.tract.eco) to learn more about us, download materials, register for a webinar or otherwise connect with us. You may always change the communication preferences with us as explained in Section 8 of this Notice. Personal Data we collect about you may include your full name, email, position, company name, phone number and cookies.
TRACT Sales and Marketing Activities: we collect information that you give us directly when you interact with us related to our sales and marketing communication activities such as providing you with promotional materials and information or a commercial offer, online or offline campaigns, events and webinars, commenting on our blogs, posts and other social media activities. You may always change the communication preferences with us as explained in Section 8 of this Notice. Personal Data we collect about you includes your full name, email, position, company name and phone number.
TRACT Recruitment and Hiring: If you apply directly for a job with us, or if you have been engaged with us via an external recruitment agency, we will process the following Personal Data of you that we receive directly from you or extract from your CV or other materials that is shared with us: your first and your last name, your date of birth, your address, your phone number, your email address, your LinkedIn profile and other professional public social media profiles, your personal identification or passport number, date of entry to the Netherlands.
TRACT Platform Use: we process Personal Data about you on behalf of our customer as a data processor so that you can access and use the TRACT Platform and related services according to the signed Data Processing Agreement and underlying Master User Agreement. This information includes your full name, position, company name, email, phone number, IP address and log-in credentials. You may reach out to the administrator of your TRACT account in case you need more information.
Purposes of processing your Personal Data
The main purposes for which we process your Personal Data are as follows:
Provide and improve our products and services to you;
Sales and marketing communication purposes, based on your communication preference;
For administrative and statistical purposes;
For record keeping and to comply with statutory legal and fiscal obligations;
For recruitment and hiring process (internships, employment) to hold a job interview, to conclude an internship or employment agreement, to pay out rewards.
Legal basis
We process your Personal Data on the basis of consent, performance of a contract, to comply with legal obligations or if it is in our legitimate interests.
When we process your Personal Data for our legitimate interest, we will also take you into account and ensure that the further processing of your Personal Data is performed in accordance with the legal requirements. As such we will also look into ensuring that processing for this purpose is compatible with the purpose for which the Personal Data were initially collected. This does not apply when such processing is performed due to a legal obligation. Our legitimate interests are for example: improving our product and services, reducing our costs, improving our newsletters and website or ensuring the integrity of our services and facilities.
Information sharing with Third Parties
It is possible that your Personal Data is shared with trusted third parties that perform business functions or provide services to us for the execution of the purposes listed in this Notice. All such third parties will be required to adequately safeguard your Personal Data, subject to agreements that correspond to the requirements of applicable laws. We conclude a data processing agreement with such trusted third parties that process your Personal Data on our behalf to ensure at least the same level of security and confidentiality of your Personal Data as provided by TRACT. TRACT remains responsible for these processing operations.
Our website may contain hyperlinks to third party websites. TRACT is not responsible for the content of any such third-party websites and their content and offers.
TRACT engages the following third parties that are qualified as our sub-processors to provide (parts of) services on its behalf. We will update the below list as applicable.
1118 CZ Schiphol,
Nederland
+31 (0)20-500 1500
https://privacy.microsoft.com/en-gb/privacystatement
United States
https://www.apollo.io/privacy-policy/processing-notice
Mountain View, CA 94043
United States
https://www.sybill.ai/privacy-policy
Dublin 4, DUBLIN, Ireland
DUBLIN
Co. Dublin
Ireland
https://privacy.claude.com/en/collections/10663361-commercial-customers
221 Main Street, Suite 1550
San Francisco, CA 94105
United States
https://www.docusign.com/privacy
New York 10017-5550
United States of America
https://www.filecloud.com/product-privacy-notice/
https://sentry.io/privacy/
Salesforce Tower
415 Mission Street, 3rd Floor
San Francisco, CA 94105
https://www.salesforce.com/company/legal/privacy/
https://mailchimp.com/gdpr/
International Transfers
Some of the third parties that process personal data on our behalf are located outside the European Economic Area (EEA), mainly in the United States. Whenever personal data is sent to, or made accessible from, a country outside the EEA, this is an international transfer, and European data protection law requires an appropriate safeguard so that the data continues to receive a level of protection equivalent to that provided within the EEA. The safeguard relied on for each recipient is shown in the Transfer Mechanism column of the table above. Where a transfer does take place, it is made under one of two safeguards. DPF refers to the EU-U.S. Data Privacy Framework, an adequacy decision adopted by the European Commission under which personal data may be transferred to organisations in the United States that hold a current, active certification under that framework. SCC refers to the Standard Contractual Clauses, a set of data protection terms approved by the European Commission that are incorporated into the contract with the recipient and require it to protect the data to EEA standards; these are used where an adequacy decision such as the Data Privacy Framework does not apply.
6. Security measures and data retention
In accordance with the applicable laws and regulations, TRACT has taken adequate technical and organizational measures to safeguard the security of your Personal Data. TRACT takes the protection of your Personal Data seriously and takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. TRACT periodically reviews the collection, storage and processing practices, including physical security measures, and updates these when necessary. TRACT does not store your Personal Data for longer than is strictly necessary to achieve the purposes for which your Personal Data is collected under this Notice, unless applicable law requires us to keep it longer.
7. Cookies
When you visit our website, we store cookies, web beacons, Javascript and local storage (“cookies”) on your device. Cookies ensure that your device can collect information (through Javascripts), which your device marks with small, simple text files (cookies and local storage) and then sends it at the right time (web beacons). So, the next time you visit our website, cookies ensure that we recognise your device.
A cookie is a small text file that is stored in the browser of your computer, tablet or smartphone when you first visit this website. TRACT currently uses functional, analytical and tracking cookies in its website www.tract.eco.
Functional cookies: these cookies are necessary for basic site functionalities and are therefore set when you visit our websites. These cookies remember your preferences as you use our websites. They are also used to distribute the load on our servers, which keeps the site available, and for security purposes.
Tracking cookies: these are cookies that keep track of your surfing behaviour so that we can show you relevant information.
Analytical cookies: the cookies are used to collect information about the way in which visitors use our website, including information about the pages most visited and the number of error messages displayed. We collect statistics from the users of our website with analytic cookies. These cookies help TRACT to improve its website.
8. Your rights
Depending on the circumstances, you may have the right to:
Right to access. You have the right to request us for copies of your Personal Data. We may charge you a small fee for additional copies if applicable.
Right to rectification. You have the right to ask us to correct information you believe is inaccurate, or to complete information you believe is incomplete.
Right to erasure. You have the right to ask us to erase your Personal Data, under certain conditions.
Right to object to processing or request restrictions to our processing. You can object to our processing of your Personal Data or request us to restrict it, under certain conditions.
Right to data portability. You have the right that we transfer the data that we have collected over you to another organization, or directly to you, under certain conditions.
Right to withdraw your consent. Where we process data on the basis of your consent, you may withdraw it at any time.
Right not to be subject to automated individual decision-making, including profiling. You can object against decisions made solely by automated processing, including profiling, that produce legal effects or similarly significant impacts on you, ensuring that meaningful human involvement can be required in such decisions
If you want more information regarding these privacy rights, or if you wish to exercise (one of) these privacy rights, please send your request to dataprivacyofficer@tract.eco. TRACT will respond within four weeks to your request. We may not always be able to fulfil your request. For example, your request for access could be limited if this is necessary to protect the rights and freedom of other individuals or we may refuse to delete your personal data in case the processing of such data is necessary for compliance with legal obligations. If TRACT denies your request, TRACT will explain why and inform you on your rights.
If you are not satisfied with the way your request has been handled or the way TRACT processes your Personal Data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): www.autoriteitpersoonsgegevens.nl/en.
9. How we look after this notice
We have most recently updated this Notice on June 26, 2026, and it replaces earlier versions. We will update this Notice from time to time. We therefore advise you to consult this Notice frequently.
10. Who to contact for your privacy inquiries
General Counsel
Tract B.V.
Lighthouse Building, floor 6.
Basisweg 32
1043 AP, Amsterdam, Netherlands
Email: dataprivacyofficer@tract.eco