🔒 Privacy & Cookie Policy

This Privacy & Cookie Policy applies to the use of app.colorexperiencesystem.com, the web application of the Color Experience System, developed and managed by Stichting Xconea. We value your privacy and handle personal data in compliance with the EU General Data Protection Regulation (GDPR).

We collect only the data necessary to provide and improve our services, including:

• Name, email address, organisation, and contact details
• Login credentials and account preferences
• Billing and payment information (via Stripe)
• Usage data within the application (activity logs, settings, preferences)
• Technical data (such as IP address, browser, and device information)

Your data is processed for the following purposes:

• To provide secure access to the Color Experience System
• To manage customer accounts, invoices, and support requests
• To improve platform functionality and user experience
• To communicate updates, maintenance notices, or security alerts
• To meet legal and administrative obligations

We process data based on:

• Contractual necessity (to provide the service)
• Legal obligations (administrative compliance)
• Legitimate interest (security, analytics, and improvement)

We only share data with trusted processors necessary for the operation of the service:

• Hosting providers located within the EU
• Stripe for secure payment processing
• Technical service partners for maintenance and analytics

All processors act under strict data protection agreements (DPAs) in line with the GDPR.

We retain personal data only as long as necessary for the stated purposes.

User accounts can be deleted upon request. Transaction and invoicing data are retained as required by law (up to 7 years).

This application uses only functional and analytical cookies.

• Functional cookies are required for login sessions and secure access.
• Analytical cookies (via Plausible Analytics) help us understand usage patterns anonymously and do not track individual users.

No marketing or advertising cookies are used.

We implement appropriate technical and organisational measures to protect your data, including encryption (SSL/TLS), regular backups, and access control.

Under the GDPR, you have the right to:

• access your data,
• request correction or deletion,
• restrict or object to processing,
• and request data portability.

We may update this Privacy & Cookie Policy from time to time. The latest version will always be available at:

https://app.colorexperiencesystem.com/privacy