Privacy notice

This website is run by Big Dream Ventures B.V., Keizersgracht 482, 1017 EG Amsterdam, the Netherlands, registered with the Dutch Chamber of Commerce (KvK) under number 63338149. We are the controller for the personal data described in this notice.

This notice covers atomicrails.com only. The data of the people who buy gift cards through the Atomicrails API is handled under the agreement with each business customer and the privacy policy of the retailer that sells the card.

When you contact us. The contact form asks for your email address and your message, and notes the topic and the page you came from. We use them to answer you and to follow up on what you asked about. The legal basis is our legitimate interest in replying to the people who write to us, or taking steps you asked for before entering into an agreement.

Spam protection. The contact form and the demo sign-in use Google reCAPTCHA to tell people from bots. reCAPTCHA collects information about your device and browser and sends it to Google, which handles it under its own privacy policy. The legal basis is our legitimate interest in keeping the form free of abuse.

When you visit the site. Our servers log each request, including your IP address, browser, the page you asked for and the time. We look up the country your IP address belongs to. We use this to keep the site secure, limit abusive traffic and fix problems, which is our legitimate interest.

Analytics, only if you accept. If you accept analytics cookies in the banner, we use Google Analytics to understand how the site is used: which pages are visited, roughly where visitors come from and how they found us. Google Analytics collects information about your device and browsing on this site and sends it to Google, which handles it under its own privacy policy. The legal basis is your consent, which you can withdraw at any time.

We set a cookie called analytics-consent, which remembers whether you accepted or declined analytics and lasts six months. It's needed to respect your choice, so it doesn't require consent. You can change your choice at any time with “Cookie settings” in the footer.

Only if you accept, Google Analytics sets cookies (such as _ga) to recognise returning visitors. The contact form and the demo sign-in load reCAPTCHA, which may set Google cookies needed for the spam check. If you sign in to the demo, a cookie keeps you signed in for 30 days. We don't use advertising cookies.

We don't sell personal data. We share it only with the service providers that run parts of this site for us, under agreements that limit what they may do with it:

• Our email provider, which delivers contact-form messages to our team
• Google, for reCAPTCHA and Google Analytics
• Amazon Web Services, which hosts the site in the EU

Some of these providers may process data outside the European Economic Area. Where they do, the transfer is covered by safeguards the GDPR recognises, such as the European Commission's standard contractual clauses.

We keep contact-form messages for as long as we need them to deal with your question and any follow-up, and then delete them. Server logs are kept only as long as needed for security and troubleshooting.

Under the GDPR you can ask to see the personal data we hold about you, have it corrected or deleted, restrict or object to how we use it, or receive it in a portable format. Email support@koomalooma.com and we'll reply within a month.

You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

We'll update this notice when the site changes how it handles personal data, and change the date at the top when we do. Our terms and conditions cover the rest of how the site may be used.