1. Who we are

DynamicWhale B.V. is a private limited company incorporated in the Netherlands, registered with the Dutch Chamber of Commerce under number 96714395, with its registered office at Stadhuisplein 9, Unit 5.10, 3012 AR Rotterdam, the Netherlands. We run outbound sales and go-to-market programmes for B2B software companies.

For privacy questions, or to exercise any of the rights in section 10, contact us at privacy@dynamicwhale.com. That address reaches the people responsible for data protection at DynamicWhale.

2. What this policy covers

This policy explains how we handle personal data when you:

• visit www.dynamicwhale.com (the "Website"),

• contact us through the Website, by email, by phone or on LinkedIn,

• apply for a job with us,

• are contacted by us on behalf of one of our clients as part of an outbound sales programme, or

• work for one of our clients or suppliers and deal with us in that capacity.

The DynamicWhale Client Portal has its own Privacy Policy, which applies to the meetings, transcripts and insights we deliver to clients through it. Cookies and similar technologies on the Website are described in our Cookies Policy.

3. Data we collect and where it comes from

3.1 Visitors to the Website

When you browse the Website we collect technical and usage data: pages viewed, approximate location derived from your IP address, device and browser type, referring site, and how you move through the pages. This comes from your browser and from the analytics tools described in section 6.

3.2 People who contact us

If you use the contact form we collect the name, email address and message you enter, together with the time you sent it. If you email, call or message us we keep the correspondence and the contact details you use. We may also add your details to our CRM so that we can follow up.

3.3 Job applicants

If you apply for a role we collect what you send us: your name, contact details, CV, cover letter, LinkedIn profile, work history and anything else you choose to include, plus our notes from interviews and assessments.

3.4 People we contact on behalf of our clients

Our core service is reaching decision makers at companies our clients want to sell to. To do that we hold business contact data about you: name, job title, employer, work email address, work phone number, LinkedIn profile URL, the industry and size of your company, and a record of our interactions with you (emails sent, calls made, meetings booked and your responses).

We obtain this data from publicly available professional sources, from B2B data providers such as Apollo and Cognism, and from the client on whose behalf we contact you. We do not collect special categories of personal data and we only use work-related contact details.

3.5 Client and supplier contacts

If you represent a client or a supplier we hold your name, role, work contact details and the correspondence needed to manage the relationship.

4. Why we use it and on what legal basis

• Running and improving the Website: security, performance and understanding how it is used. Legal basis: our legitimate interest in operating a working, secure website; analytics cookies are placed only with your consent.

• Responding to enquiries: answering your message and following up on it. Legal basis: our legitimate interest in responding to people who contact us, and taking steps at your request before entering into a contract.

• Recruitment: assessing your application and communicating with you about it. Legal basis: taking steps at your request before entering into a contract, and our legitimate interest in hiring.

• Outbound sales on behalf of clients: identifying relevant decision makers, contacting you about a client's product or service, and booking meetings. Legal basis: our and our clients' legitimate interest in business-to-business marketing. You can object at any time and we will stop, see section 10.

• Managing client and supplier relationships: performing our contracts, invoicing and support. Legal basis: performance of a contract and our legitimate interest in running our business.

• Legal obligations: keeping records required by tax, accounting and other laws. Legal basis: compliance with a legal obligation.

We do not sell personal data and we do not make decisions about you based solely on automated processing.

5. Outreach on behalf of our clients

When we contact you as part of a client programme we act on behalf of that client. We will tell you which company we are calling or writing for. If you show interest, we pass your contact details and a summary of the conversation to that client so they can continue the discussion. From that point the client also processes your data under its own privacy policy.

Calls made by our team may be recorded and transcribed for quality, training and record-keeping purposes where this is permitted by law. If you would rather not be recorded, say so at the start of the call.

If you do not want to hear from us or from a particular client, tell the person who contacted you, reply to any email from us, or write to privacy@dynamicwhale.com. We keep a record of your objection so that we do not contact you again.

6. Cookies and analytics

The Website uses Google Analytics to understand how visitors use it, and the built-in, cookieless visitor statistics of Framer, the platform that hosts the Website. Google Analytics cookies are only set after you accept them in the cookie banner. Details of each cookie, how long it lasts and how to withdraw consent are in our Cookies Policy.

7. Who we share it with

We share personal data only with the service providers we need in order to run the Website and our business, with our clients as described in section 5, and where the law requires it. Our main providers are:

• Framer — hosts the Website and stores contact form submissions.

• Google — Google Workspace for email, documents and calendars, and Google Analytics for Website statistics.

• HubSpot — our CRM, where enquiries, prospects, clients and interaction history are kept.

• Apollo and Cognism — B2B data providers we use to find and verify business contact details.

• Sales engagement tools — the calling and email tooling our team uses to reach prospects and log activity.

• Professional advisers and authorities — accountants, lawyers, insurers and public authorities where we are required or entitled to disclose data.

Each provider is bound by a contract that limits what it may do with the data. We may also disclose data to a buyer or successor if DynamicWhale is sold or merged, under the same protections.

8. Where your data is processed

We are based in the Netherlands and keep our core systems in the European Union where we can. Some of the providers in section 7 process data in the United States or elsewhere outside the European Economic Area. Where that happens we rely on a European Commission adequacy decision, including the EU-U.S. Data Privacy Framework for certified providers, or on the European Commission's standard contractual clauses, together with any additional safeguards that are appropriate. You can ask us for information about the safeguards that apply by writing to privacy@dynamicwhale.com.

9. How long we keep it

• Website usage data: as set out in the Cookies Policy, at most 26 months for Google Analytics.

• Enquiries: as long as needed to deal with your enquiry and, if it leads to a business relationship, for the duration of that relationship.

• Job applications: up to four weeks after the recruitment process ends, or up to one year if you agree that we may keep your details for future roles.

• Prospect data: up to two years after our last meaningful interaction with you. Objections to being contacted are kept for as long as needed to honour them.

• Client and supplier records: for the duration of the relationship and afterwards for as long as tax and accounting law requires, which in the Netherlands is generally seven years.

When data is no longer needed we delete it or anonymise it.

10. Your rights

Under the General Data Protection Regulation you have the right to:

• ask for a copy of the personal data we hold about you,

• have inaccurate or incomplete data corrected,

• have your data deleted where there is no good reason for us to keep it,

• ask us to restrict how we use it while a question about it is resolved,

• object to our processing, including at any time to direct marketing and to outreach on behalf of our clients,

• receive the data you gave us in a portable format,

• withdraw consent where we rely on it, without affecting what was done before.

To exercise any of these rights write to privacy@dynamicwhale.com. We will respond within one month. We may ask you to confirm your identity first. You can also lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or with the supervisory authority in the country where you live or work.

11. Security

We protect personal data with access controls, encryption in transit, two-factor authentication on our core systems and contractual obligations on the providers we use. Access is limited to the people who need it for their work. No system is perfectly secure; if a personal data breach affects you and is likely to result in a high risk to your rights, we will tell you and the supervisory authority as the law requires.

12. Changes and contact

If we change how we handle personal data we will update this page and the date shown at the top. Material changes will be highlighted on the Website.

DynamicWhale B.V., Stadhuisplein 9, Unit 5.10, 3012 AR Rotterdam, the Netherlands. Privacy contact: privacy@dynamicwhale.com.