Privacy Statement Feedback Company B.V.

This statement is relevant to you, as a consumer, if you use the services of Feedback Company.

This Privacy Statement was drawn up on 26 October 2026.

General

The General Data Protection Regulation (GDPR) is European Union legislation on the protection of privacy and personal data. Based on this regulation, an organization such as Feedback Company working with personal data has certain obligations and persons whose personal data can be processed have certain rights.

What does Feedback Company do?

Feedback Company collects reviews for its clients through its platform. If you are a customer of a company that uses Feedback Company, that company may ask you to write a review. That company is the controller of your personal data; Feedback Company is the processor and processes your data only on behalf of that company. When you write a review, you leave some personal data behind. This data is needed to publish a review. Your consent is the legal basis. Special categories of personal data, such as data about your health, are only processed with your explicit consent.

What is the purpose of Feedback Company?

The purpose of Feedback Company is to enable companies to collect reviews. With this valuable input, companies can improve their internal processes and better meet the expectations of their customers. The ultimate goal is to increase customer satisfaction over time. Feedback Company believes in transparency. To judge whether a company is reliable, consumers attach great value to the opinions of others. Online reviews are therefore a perfect way to show reliability.

Since both consumers and companies attach great value to these reviews, Feedback Company will keep your personal data for as long as the company you reviewed is a client of Feedback Company. This is necessary because your review would otherwise be lost. Once this necessity no longer applies, we will delete your personal data as soon as possible and within three months at the latest.

What personal data can be recorded about you as a data subject?

• Your name (first name, middle name, last name). You decide whether and how your name is shown with your review; see “Will my review be made public?”;
• An email address (business or personal) at which you can be reached;
• The IP address from which you write the review;
• Your purchase history relating to the product(s) you bought from the company.

For the technical operation of its platform, Feedback Company also uses suppliers, such as Google Cloud for hosting. These are sub-processors. They act only on instruction and have signed a data processing agreement.

Will my review be made public?

Yes. After review, your review is published on the company’s review page at Feedback Company and may be shown on that company’s website. The company may also choose to publish your review on third-party platforms, such as Google. Whether this happens is decided by the company.

Only the name you enter yourself is shown with your review: your full name, your first name, your initials or an alias. If you leave this field empty, your review is published anonymously. Your email address and IP address are never published.

Your consent is the legal basis for publishing your review and the name you enter. You give this consent when you fill in the questionnaire. If your review is published on a third-party platform such as Google, that party’s own privacy policy also applies to its processing.

How is the security of your (personal) data ensured?

• Feedback Company is certified for ISO 27001 and NEN 7510, the Dutch standard for information security in healthcare;
• All data is sent encrypted (HTTPS/TLS);
• No more personal data is recorded than is necessary for the purpose;
• The sub-processors do everything possible to prevent unauthorised access to the system, the application or parts of it. Agreements on this are laid down in the data processing agreements between the parties;
• The data is stored with Google Cloud, in data centres in the Netherlands region. Google Cloud is certified for ISO/IEC 27001, ISO/IEC 27017 (cloud security) and ISO/IEC 27018 (protection of personal data in the cloud), among others, and has SOC 2 and SOC 3 reports. The processor does, however, reserve the right to process the data in other countries within the European Union, in accordance with the applicable regulation (GDPR);
• Feedback Company has a strict internal information security policy for its employees;
• Feedback Company has (internal) protocols for incident management and data breaches.

What are your rights as a data subject?

The General Data Protection Regulation gives data subjects extensive options to stand up for themselves when their personal data is processed. Below is an overview of the rights you can exercise under the GDPR:

• The right to data portability: the right to have your personal data transferred;
• The right to erasure: the right to be forgotten;
• The right of access: the right to see the personal data processed about you;
• The right to rectification and completion: the right to have the personal data processed about you corrected. You also have the right to withdraw your consent. If you withdraw your consent, we will take your review or the displayed name offline;
• The right to restriction of processing: the right to have less of your data processed;
• The right to object: the right to object to the processing of your data;
• The right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

If you wish to exercise any of these rights, please contact the company you wrote your review about. You can also send your request to helpdesk@feedbackcompany.com. We will then forward it to that company as soon as possible and help it handle the request. The company will respond to your request within one month. Depending on the complexity and number of requests, this period may be extended by two months; you will be informed of this within the first month.

Changes to this Privacy Statement

We may change this Privacy Statement at any time. Changes take effect from the moment the revised version is published on the Feedback Company website.

Contact

Questions about this statement can be sent to helpdesk@feedbackcompany.com.