Privacy Policy

THE GLOBAL NOTE

We are The Global Note B.V., a company registered in the Netherlands (chamber of commerce number 89192214 0000) and located in Haarlem (TGN, we, us or our). With this privacy statement, we want to inform you about the way we process your personal data when you visit our website www.theglobalnote.com, when you purchase one of our products or when you contact us. It is important that you read this privacy statement carefully so that you are aware of how and why we use your personal data.

When processing your personal data, TGN qualifies as the 'data controller' within the meaning of the General Data Protection Regulation (GDPR). This means that TGN is responsible for the fair and lawful processing of your personal data.

Our website is not directed at children under the age of 16 and we do not knowingly collect any personal information from children under the age of 16. If you are under the age of 16, you must make sure that the order is placed by a person who is 16 years or older.

Contact

If you have any questions about this privacy statement or the processing of your personal data, please contact our us at info@theglobalnote.com.

The personal data we collect about you

The term 'personal data' is understood to mean all information that can be traced back to a person who can be identified (directly or indirectly), such as a first and last name, telephone number, postal and electronic addresses, date of birth, payment information and bank details. Data that cannot be traced back to a person (anonymous data) is not included.

We only collect personal data that you voluntarily decide to provide to us, for instance when you purchase one of our products or correspond with us. We do not collect personal data via third parties.

The personal data we process about you is further specified in the table below (in paragraph 3

Cookies

When you visit or use our website, we collect personal data through our use of cookies.
If you want to know more about the types of cookies used on our website, please refer to our cookie statement: Cookie Statement.

How we use your personal data

We will only process your personal data when we have a legal ground to do so. Thus, we will only process your data when this is necessary (i) for the establishment and execution of the agreement we have with you, (ii) to comply with our legal obligations (e.g. administration and tax obligations), or (iii) to pursue our own legitimate interests (but always on the condition that your interests and fundamental rights do not outweigh our legitimate interests).

If we want to process personal data and cannot base this on one of the aforementioned legal grounds, we will always ask for your prior consent to such processing (and only if this is possible and allowed under the GDPR). You can withdraw your consent at any time, either in the same way you consented or by contacting helpdesk at helpdesk@globalnote.com. Upon withdrawal of your consent, we will stop processing the related personal data. The withdrawal of your consent does not affect the lawfulness of the processing operations that we carried out before the withdrawal.

If you refuse to provide us with the required personal data (as listed in the table below) we may not be able to provide you with all or part of our products or services or you may not be able to visit the most optimal version of our website.

The situations in which we will process your personal data are listed more specifically below. You can also read which personal data we process for a certain purpose; on which legal basis we do this and how long we will keep your personal data for that purpose.

Purpose	Personal data	Legal basis	Retention period
To process your purchase order on our website	Your name(s) and last name Shipping address Billing address Contact details (telephone number and email address) Date of birth (to verify that you are 16 years or older) Details about your order (including the amount of purchased products, price, discounts, requests and status of your order); and Payment details (method of payment, status of payment, and whether the payment was successfully received)	Necessary for entering into and performing our contract with you.	For the duration of five (5) years after your order or purchase (to comply with statutory limitation periods).
To communicate with you regarding your purchase, our products or our website and to notify you about changes to our terms or the privacy statement.	Contact details (telephone number and email address) Other personal data that you decide to share with us (such as via chat messages)	Necessary for our legitimate interests (to provide support and respond to your questions and comments).	For the duration of two (2) years after your last purchase or two (2) years after the moment we have last been in contact with you.
Administration and (financial) management of our business	Contact details (telephone number and email address) Details about your orders (including the nature and amount of purchased products, price, discounts, requests and status of your orders and purchases)	Necessary to fulfil our legal tax obligations and regulatory compliance obligations, our accounting obligations and other relevant legal obligations (such as cooperating with regulators), and/or necessary in view of our legitimate interests (proper management of our business).	For the duration of seven (7) years after your purchase (as required under applicable tax and administration laws)
To measure interest in and improve our website and customise your user experience.	Data about your device and browser type (including IP address and MAC address) Data about your use of our website, such as the web pages you have viewed, the hyperlinks you clicked on and websites you visited before you opened our website, and your preferences	Necessary for our legitimate interest (to keep our website updated and relevant) or your consent for collecting personal data through cookies.	For a duration of maximum six (6) months or, where the processing is based on your consent, until the moment you withdraw your consent (whichever is earlier).
To notify you about promotions and special offers, as well as other products we offer that may be of interest to you.	Contact details (telephone number and email address) Your marketing preferences Other personal data that you share with us (such as via chat messages)	Necessary for our legitimate interests (i.e. to be able to carry out marketing-related activities towards our customers) or your consent for receiving marketing messages (when you are not yet our customer).	For the duration of two (2) years after your last purchase (unless you have opted-out from receiving marketing related messages, in which case we stop processing your data for that purpose), or, where the processing is based on your consent, until the moment you withdraw consent.
To protect our business, to resolve disputes, collect overdue payments, troubleshoot problems, to prevent potentially prohibited or illegal activities.	Your name(s) and last name Shipping address Billing address Contact details (telephone number and email address) Date of birth Details about your orders (including the nature and amount of purchased products, price, discounts, requests and status of your orders and purchases) Payment details (method of payment, status of payment and whether the payment was successfully received) Account information (username and password)	Necessary for our legitimate interest to protect our business and rights or necessary to comply with our legal obligations (e.g. to cooperate with law enforcement and regulators).	For the duration of five (5) years after your last purchase or complaint, unless a longer retention period is required to comply with regulatory requirement or to defend or prosecute legal claims.
To obtain your feedback (e.g. through a customer satisfaction survey) or to ask you to write a review about our product. We may publish the content of your review on our website.	Your name(s) and last name Contact details (telephone number and email address) Purchase history The content of the review or other feedback you provide to us	Necessary for our legitimate interest to improve our products and services and build our brand.	For a duration of maximum six (6) months after your last purchase of one of our products.
To generate pseudonymised and / or aggregated statistics and to analyse the outcome of these statistics.	Date of birth Region or country you reside in Purchase history	Necessary for our legitimate interest to improve our services, product, communication methods and the functionality of our website, and to build our brand.	For the duration of two (2) years after your last purchase of one of our products.

Sharing your personal data

Where necessary for the purposes described above and only where permitted by law, we will share your data with external parties, being:

IT service providers, including hosting and storage providers, secure email providers and cloud providers;
partners with whom we cooperate when creating our product, such as football clubs, record labels, modelling agencies, and representatives of the person(s) visible on the note. In such case, we will only share pseudonymised or aggregated data connected to the note(s) you purchase;
payment service providers, third party advisors, auditors, and other service providers;
marketing agencies: competent supervisors or authorities to comply with requests or orders; with judicial authorities and other parties concerned in the context of legal proceedings; with other third parties to establish or exercise our legal rights or in the context of the settlement or institution of complaints or proceedings;
parties that we need to involve in order to investigate to investigate, prevent, or detect (suspected) fraudulent, abusive, inappropriate or other unlawful activities and/or to take action against them;
debt collection agencies (where we do not timely receive payment for your order(s);
interested parties in connection with a (proposed) sale, merger, acquisition, consolidation or disposal of assets or our business activities, or in the unlikely event of bankruptcy. In these situations, we will only share personal data with third parties to the extent that this is necessary in the context of the (completion of the) transaction and, where possible, we will only share anonymised or aggregated data; and
other parties as notified to you or agreed between you and us from time to time.

International transfer

We will share your personal data with third parties outside the European Economic Area (EEA), but only when necessary for the purposes we have described in the table in paragraph 1 and to the extent permitted by law.

Our IT partners are located within the EEA, but some of our partners, including football clubs, record labels, modelling agencies, and representatives of the person(s) visible on the note, are established in countries outside the EEA. When TGN provides your personal data to these partners, we will ensure that a substantially equivalent level of protection is provided to that ensured in the EEA (for example, through implementation of the standard contractual clauses adopted by the European Commission). You may at any time request a copy of the relevant safeguards in place by sending an email to legal@theglobalnote.com.

Data security

We take the security of your personal data very seriously. We have therefore implemented appropriate technical and organisational security measures to prevent your personal data from being lost, used, accessed by unauthorised persons, modified, or disclosed in an unauthorised manner.
Access to your personal data is only authorised for people who have a need-to-know basis to access your personal data. We ensure that the people who can access your personal data are bound by confidentiality obligations.

Retention period of your personal data

We will retain your personal data no longer than necessary to fulfil the purposes set out in this privacy statement. Details of the relevant retention periods are set out in the table in paragraph 1 above.

Your rights

It is important that the personal data we process about you is accurate and up to date. You can check, supplement, and partly update your personal data by sending an email to helpdesk@theglobalnote.com.

In accordance with the GDPR, you have the right to access, rectify and delete your personal data, the right to restrict and object to the processing of your personal data and the right to data portability

Below you will find more details and information on how and when to exercise your rights:

The right to access your personal data. This gives you the right to receive a copy of the personal data we process about you, to check whether the data is correct and whether we process it lawfully.
The right to request that your personal data be corrected or updated. You can have any incomplete or incorrect personal data that we hold amended or completed.
The right to request the deletion of your personal data, if:
- your personal data are no longer needed for the purposes for which they were collected; or
- you withdraw your consent if the processing of your personal data is based on consent and no other legal basis exists; or
- you object to the processing of your personal data, and we do not have a compelling legitimate ground for processing; or
- your personal data are processed unlawfully; or
- your personal data must be removed to comply with a legal obligation.
The right to object to the processing of your personal data. We will comply with your request, unless we have a legitimate interest that outweighs your interests or if we need to continue processing your personal data to establish, exercise or defend a legal claim or to comply with our legal obligations.
The right to restrict the processing of your personal data, if:
- the accuracy of your personal data is disputed by you, during the period in which we need to verify the accuracy of the personal data; or
- the processing is unlawful, and you oppose the deletion of your personal data and request its restriction; or
- we no longer need your personal data for the purposes of processing, but your personal data are necessary for you in the context of a legal claim; or
- you have objected to the processing, during the period in which we must verify compelling legitimate grounds.
The right to data portability. You can request us to receive your personal data and/or to send it to a third party, as far as this is feasible. You only have this right if it concerns personal data that you have provided to us, and the processing is based on consent or based on the necessity for the performance of our contract with.
- You can exercise your rights as set out above by submitting a request by e-mail to legal at legal@theglobalnote.com. We will endeavour to respond to your request within one month of receipt. However, this one-month period may be extended by two months, for example, in the case of a large or complex request. In this case, we will notify you within one month of receiving your request and explain why the extension is necessary.
- You also have the right to lodge a complaint with the supervisory authority (in the Netherlands: Autoriteit Persoonsgegevens) about the way we process your personal data. However, we would appreciate the opportunity to address your complaint before you turn to the supervisory authority.

Changes to this privacy statement

We may change this privacy statement from time to time. If the changes are material, we will always actively inform you about them and provide you with a new version of this privacy statement. The most recent version of this privacy statement can always be found on our website.

Last updated: 23 November 2023.