a. Customer Information
Data you provide directly to us when you sign up for our Services, such as:

• Full Name
• Company Name
• Contact Details (Email, Phone Number)
• Billing and payment information
• Other information you choose to provide

b. Operational Data
When using our Services, we collect and process data relevant to your supply chain operations, including:

• Warehouse and invertory data
• Transport schedules
• Order and production information
• Customer and supplier data
• Financial and invoicing data

c. Usage Data
Automatically collected data includes:

• IP Address
• Browser type and version
• Device type and operating system
• Platform ussage patterns (e.g. clicks, navigation)

We may collect the following categories of information:‍

We process your data for the following purposes:

• To analyze and optimize supply chains
  
• We may generate insights from operational data to improve efficiency.
• To deliver and improve our services
  
• Including onboarding, configuration, support, and updates
• To communicate with you
  
• Including service-related messages, updates, and—with consent—marketing materials.
• To comply with legal obligations
  
• Such as tax compliance or responding to lawful requests.

Under the General Data Protection Regulation (GDPR), we process your data based on one or more of the following legal grounds:

• Contractual necessity – to deliver services you've signed up for
  
• Legal obligation – to comply with relevant regulations
  
• Legitimate interests – e.g., service improvement, fraud prevention
  
• Consent – e.g., for marketing or optional analytics
  

We use cookies and similar technologies on our websites and platform for:

• Essential functionality (e.g., login sessions, navigation)
  
• User preferences (e.g., language, theme)
  
• Analytics (e.g., traffic sources, page visits)
  
• Marketing (e.g., retargeting, ad personalization)
  
• Security (e.g., fraud prevention, session validation)
  

A cookie consent banner allows you to manage your preferences.

We apply appropriate technical and organizational security measures, including:

• Data encryption
  
• Two-factor authentication (2FA)
  
• Role-based access controls
  
• Regular security assessments
  
• Secure cloud hosting
  

We work with infrastructure providers like Hetzner, who meet EU-level data security standards.

We retain your personal data only as long as necessary to:

• Provide and improve our services
  
• Comply with legal and regulatory obligations
  
• Resolve disputes or enforce agreements
  

By default, personal data is retained for a maximum of one (6) month, unless otherwise agreed. Upon request, we will delete your data within 72 hours.

You have the following rights:

• Right to access – to see what personal data we hold
  
• Right to rectification – to correct inaccurate or incomplete data
  
• Right to erasure – to request deletion of your data
  
• Right to restrict processing – to limit how we use your data
  
• Right to data portability – to obtain and reuse your data elsewhere
  
• Right to object – to certain types of data processing
  
• Right to withdraw consent – at any time, for consent-based processing
  

To exercise your rights, contact us at officer@cotit.eu.
If you believe we are not handling your data in accordance with the law, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):
👉 https://autoriteitpersoonsgegevens.nl/

Our Services are not intended for individuals under the age of 16. We do not knowingly collect or process personal data from children.

We may update this Privacy Policy from time to time to reflect changes in our services or legal obligations.

• Material changes will be communicated via email or posted prominently on our website.
  
• The Effective Date at the top will be updated accordingly.
  

If you have questions, requests, or concerns regarding this Privacy Policy or your personal data, contact us at:

COTIT B.V.
Email: officer@cotit.eu