LEGAL

Privacy statement

Last updated: 1 January 2026

Controller

newatogi, established at Allegrolaan 14, 6842DE Arnhem, is responsible for the processing of personal data as described in this privacy statement.

Contact details:

At this time we have not appointed a Data Protection Officer. For privacy questions you can contact us at hallo@newatogi.com.

Personal data we process

newatogi processes your personal data because you use our services and/or because you provide this data to us yourself. Below you will find an overview of the personal data we process:

Account data

  • First and last name
  • Email address
  • Phone number (optional)
  • Organisation name
  • Job title

Payment data

  • Bank account number (via our payment provider)
  • Billing address

Technical data

  • IP address
  • Internet browser and device type
  • Data about your activities on our platform
  • Log files and access history

Content you upload

  • Logos, images, videos
  • Texts and descriptions
  • Sponsor information
  • Narrowcasting content

Special and/or sensitive personal data

newatogi does not process special categories of personal data such as:

  • Race or ethnic origin
  • Sex life
  • Health data
  • Biometric data
  • Genetic data
  • Religious or political beliefs

If you upload such data in content (for example in videos or images), you are responsible for this yourself and you must ensure the appropriate legal basis.

Data processing by you as an organisation

When you use the platform, you may process personal data of your own contacts, employees or business relations — for example in campaign descriptions, bids, contracts or uploaded files. In that case you, as an organisation, are the controller within the meaning of the GDPR. newatogi then acts as a processor on your behalf.

This means that you yourself are responsible for ensuring that:

  • You have a valid legal basis for processing this data
  • The data subjects have been informed about the processing
  • You comply with requests from data subjects (such as access, rectification or erasure)

Upon request we will enter into a data processing agreement in accordance with Article 28 GDPR. To arrange this, please contact us at hallo@newatogi.com.

For what purpose and on what legal basis

newatogi processes your personal data for the following purposes:

On the basis of performance of the contract

  • Providing our SaaS services (sponsorship management and narrowcasting)
  • Processing your payment
  • Being able to call or email you if this is necessary to perform our services
  • To deliver goods and services to you (print products)
  • To inform you about changes to our services
  • Customer service and support

On the basis of your consent

  • Sending our newsletter and/or promotional communications (you can unsubscribe at any time)

On the basis of legitimate interest

  • Analysing your behaviour on the platform in order to improve the platform
  • Fraud prevention and security
  • Improving the user experience

On the basis of legal obligation

  • Data we need for our tax return

How long we retain personal data

newatogi does not retain your personal data longer than is strictly necessary to achieve the purposes for which your data is collected. We apply the following retention periods:

Account data and platform data

  • Active accounts: For the duration of your subscription
  • After subscription ends: 1 year, after which data is anonymised
  • Anonymised data: Indefinitely for statistical purposes

Financial data

  • Invoices and payment data: 7 years (statutory obligation, Dutch Tax Authority)

Communication and support

  • Emails and support tickets: 2 years after last contact

Marketing and newsletters

  • Until unsubscribe or 3 years after last interaction

Uploaded content

  • During subscription: As long as your account is active
  • After cancellation: 30 days for data export, then deleted

Sharing personal data with third parties

newatogi does not sell your data to third parties

We only provide data where this is necessary to perform our agreement with you or to comply with a legal obligation.

Third parties we work with:

Payment providers

Mollie - For processing payments

Hosting and infrastructure

Supabase - Database hosting (EU servers)

Vercel - Platform hosting and CDN

Upstash - Rate limiting and abuse prevention (IP address)

Analytics and monitoring

Google Analytics - Website statistics (pre-login pages only)

Sentry - Error tracking and monitoring

Email and communication

Resend or comparable email service providers

Print and fulfilment

Probo - Print production and shipping (name and address details)

Data is stored within the EU in order to comply with GDPR requirements

Consent for sub-processors

By using the platform you consent to the use of the above-mentioned parties as sub-processors. When we add a new sub-processor, we will inform you about this by email. You then have 30 days to object.

Transfers outside the EU

Data is in principle stored and processed within the European Economic Area. Where transfers to countries outside the EEA are necessary, this is done on the basis of appropriate safeguards, such as the European Commission's Standard Contractual Clauses (SCCs).

Cookies

newatogi uses functional, analytical and tracking cookies. A cookie is a small text file that is stored in the browser of your computer, tablet or smartphone on your first visit to this website.

Functional cookies

These ensure that the platform works properly and that, for example, your preferences are remembered. These cookies are necessary for the basic functionality.

Analytical cookies

We use Google Analytics (on public pages only) to understand how visitors use our website. We use this information to improve our website.

Tracking cookies

We place cookies that track your browsing behaviour so that we can offer tailored content and advertisements (only with consent).

You can opt out of cookies by setting your internet browser so that it no longer stores cookies. For an explanation, see: veiliginternetten.nl

Your rights

You have the following rights regarding your personal data:

Right of access

You have the right to know which personal data we process about you.

Right to rectification

You have the right to have inaccurate or incomplete personal data rectified.

Right to erasure

You have the right to have your personal data erased.

Right to data portability

You have the right to receive your data in a structured format.

Right to object

You have the right to object to the processing of your personal data.

Right to restriction

You have the right to restrict the processing of your personal data.

How to submit a request?

You can send a request to hallo@newatogi.com

We ask you to enclose a copy of your identity document, blacking out your passport photo, MRZ, passport number and citizen service number (BSN) to protect your privacy.

We will respond to your request within four weeks.

Security of personal data

newatogi takes the protection of your data seriously and takes appropriate technical and organisational measures to prevent misuse, loss, unauthorised access, unwanted disclosure and unauthorised modification.

Our security measures:

Encryption

All data is stored encrypted and transmitted via HTTPS/TLS

Access control

Restricted access to personal data

Authentication

Strong password requirements and two-factor authentication

Monitoring

Continuous monitoring for security incidents

Backups

Regular backups in secure EU data centres

Updates

Regular security updates

Report a security issue?

Contact us immediately at hallo@newatogi.com

Filing a complaint

You have the option to file a complaint with the national supervisory authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

File a complaint with the AP

Contact

For questions about this privacy statement or about the processing of your personal data, you can contact us:

newatogi

Allegrolaan 14

6842DE Arnhem

Email: hallo@newatogi.com

Chamber of Commerce number: 99304635

Version: 1.0

Effective date: 1 January 2026