Privacy Policy

1. Data Controller

This Privacy Policy has been prepared to determine the principles regarding the processing, protection, and confidentiality of personal data obtained through electronic commerce transactions.

The data controller within the scope of the General Data Protection Regulation (EU) 2016/679 (“GDPR”) is:

Magnet Amsterdam B.V.
Operating under the brand name Rabbit Flow
Website: www.rabbitflow.co

2. Scope and Purpose

This Privacy Policy applies to customers (“Users”) who purchase products or services through the Website.

Personal data collected from Users via membership forms, purchase processes, contact forms, or other electronic means are processed lawfully, fairly, and transparently, and only for specified, explicit, and legitimate purposes.

3. Processed Personal Data

Depending on the service used, the following personal data may be processed:

  • Identity information (name, surname)

  • Contact information (email address, phone number)

  • Billing information

  • Transaction and usage data

  • IP address and technical data

  • Customer communication records

4. Legal Basis for Processing

Personal data are processed based on one or more of the following legal grounds under Article 6 of the GDPR:

  • Explicit consent of the User

  • Necessity for the performance of a contract

  • Compliance with legal obligations

  • Legitimate interests of the Company, provided that such interests do not override the fundamental rights and freedoms of the User

5. Data Sharing and Transfers

Personal data shall not be shared with third parties for commercial purposes without the explicit consent of the User.

Data may be shared only with:

  • Authorized public institutions and authorities where legally required

  • Business partners, payment service providers, or technical service providers, strictly limited to the purpose of providing services and under data processing agreements compliant with GDPR

No personal data are transferred outside the European Economic Area (EEA) unless adequate safeguards as defined by GDPR are in place.

6. Payment Security

Credit card and payment information entered on the payment page are not stored by Rabbit Flow or its servers.

All payment transactions are securely processed directly between the User’s device and the relevant payment service provider or bank through encrypted connections.

7. Data Retention

Personal data are retained only for the period necessary to fulfill the purposes for which they are processed or as required by applicable legal obligations.

After the retention period expires, personal data are securely deleted, destroyed, or anonymized.

8. Anonymized Data Usage

The Company may anonymize usage and transaction data for:

  • Statistical analysis

  • Performance evaluations

  • Marketing and campaign analysis

  • Business and annual reporting

Anonymized data cannot be used to identify Users and may be shared with business partners for these purposes.

9. Third-Party Links

The Website may contain links to third-party websites.

Magnet Amsterdam B.V. is not responsible for the privacy practices, content, or data protection policies of such websites. Users are advised to review the privacy policies of third-party sites they visit.

10. User Responsibility for Public Content

The Company shall not be liable for any damages arising from personal data voluntarily disclosed by Users in public areas of the Website, such as comments, reviews, or messages.

11. Data Subject Rights

Under GDPR, Users have the right to:

  • Access their personal data

  • Request rectification or erasure

  • Object to or restrict processing

  • Request data portability

  • Withdraw consent at any time

  • Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

Requests can be submitted via the contact details provided on the Website.

12. Amendments

The Company reserves the right to update or amend this Privacy Policy at any time.

Any changes shall become effective upon publication on the Website or through other appropriate communication channels.

Contact Information

For any questions, requests, or applications regarding personal data processing, Users may contact the Company via the following email addresses:

Email:
info@rabbitflow.co
info@magnetamsterdam.nl

Requests related to GDPR rights (including access, rectification, erasure, restriction, objection, and data portability) will be handled in accordance with applicable data protection legislation.