Privacy statement

Who we are

Pikoji is a brand of Fusioncolors B.V. (trading as Fusion Colors), registered with the Netherlands Chamber of Commerce under number 53321383. We are responsible for the processing of personal data through this website.

• Postal address: Fusioncolors B.V., Klappolder 212, 2665 MR Bleiswijk, the Netherlands
• Email: info@pikoji.com

We have not appointed a data protection officer, as this is not required for us. For questions about privacy, please use the email address above.

In short

• No accounts and no logins, not for children either
• Children never have to enter their name, age or email address
• Our website places no cookies, so there is no cookie banner either
• The stamp card stays on your own device and never reaches us
• We count visits without cookies and without recognising anyone
• No ads, no profiles, and we don't sell data
• Videos are on our own website, without YouTube or any other video service
• Contact and quote requests are for businesses, and we only use them to reply

For children

On Pikoji you don't have to tell us your name, how old you are or where you live. Your stamps are kept by your own tablet or phone. We can't see them.

We do count how often an adventure is played. But we don't know who is playing.

Got a question about this page? Ask your mum, your dad or someone else who looks after you.

Children on Pikoji

Pikoji is made for children aged about 4 to 10 and their parents. A child can use everything on the website without telling us anything about themselves. There is no chat, no place to post comments and no way to upload photos or other files. Whatever a child taps or answers in an adventure stays in the browser and is not sent to us.

The contact form is on the business page and is meant for adults contacting us on behalf of a company. If a child has sent us personal data anyway, please let us know and we will delete it.

The stamp card

The browser on the tablet, phone or computer itself remembers which adventures your child has completed, in the browser's local storage. It only holds a list of completed adventures, with no name or other details about your child. That list is not sent to us and we cannot see it.

If you clear the website data in your browser, the stamp card is empty again. This storage is needed for the stamp card your child uses, so we don't ask for consent for it.

Cookies

This website places no cookies on visitors' devices. No advertising cookies, no analytics cookies and no cookies that track your visit. That is why you won't see a cookie banner.

Only staff who edit the website's content get a technical cookie while editing, so they can preview their changes.

Visitor statistics

We want to know which parts of the website are used, so we can improve them. For this we use Vercel Web Analytics. It places no cookies and stores nothing on your device. To count visits, Vercel turns each request into a temporary code that expires after 24 hours. Vercel does not link the statistics to a person or an IP address. So we cannot recognise a visitor, not even when they come back the next day.

We see:

• which pages are visited and when
• roughly which country, region or city a visit comes from
• which website someone came from
• the type of device, operating system and browser
• whether someone chooses a language, opens a world, starts or completes an adventure, starts a video or downloads something
• whether a contact request was sent, with only the chosen subject

We never see what a child taps or answers in an adventure, or what anyone writes in the contact form. We can look back at the statistics for up to 12 months.

We do this based on our legitimate interest in improving the website (Article 6(1)(f) GDPR). Because the measurement recognises no one and stores nothing on the device, no consent is needed.

Videos

Pikoji's videos are on our own website. Like the images, they come from Sanity's servers (see Services we use). No YouTube or other video service is involved, and a video places no cookies. We count that a video is started without recognising anyone (see Visitor statistics).

Contact and quote requests from businesses

On the business page, retailers, exporters and other companies can get in touch or request a no-obligation quote through the catalogue. We ask for your company name, name and email address, and for the contact form your message. If you like, you can also enter your phone number and country, and for a quote a preferred delivery date and comments. A quote request also includes the products and quantities you chose. The language of the page, and for the contact form the chosen subject, are sent along. Without the required fields we cannot answer your question.

Your browser remembers which products you pick for a quote on your own device until you send the request. The request only reaches us when you tap send.

The website does not store your message. It goes through the website's server straight to our business mailbox as an email, sent with the email service Resend. If you request a quote, you also receive a confirmation of your request through Resend. Resend keeps a copy of sent emails in its log for 30 days and then deletes it.

We only use your details to answer your question and, if you wish, to prepare a collaboration. We do so based on our legitimate interest in responding to business enquiries (Article 6(1)(f) GDPR), or because it is needed to prepare an agreement with you (Article 6(1)(b) GDPR). We keep the email for two years after the last contact. If a business relationship follows, we keep the data for as long as the law requires for our accounts.

To stop spam, the form checks whether a human filled it in. We use no cookies and no IP addresses for this.

Links to other websites

The website contains links to other websites, such as Floriday and our social media pages. If you click such a link, you go to that website and its privacy policy applies. We have no control over what those websites do with your data.

Services we use

To run the website we use a few services. They process data only on our behalf and under our agreements, and may not use it for their own purposes.

• Vercel (Vercel Inc., United States) hosts the website and counts visits. On every visit Vercel processes technical data such as the IP address, the type of browser and the requested page, to deliver and secure the website. The contact and quote forms also run through Vercel's servers.
• Sanity (sanity.io) delivers the texts, images, videos, audio and downloads. Your browser fetches them from Sanity's servers, which receive your IP address and type of browser.
• Sentry (Functional Software Inc., United States) reports technical errors on the website to us. A report contains the error, the page, the type of device and the browser. No cookies, IP addresses, screen recordings or entered data are included. Sentry stores the reports in the European Union (Frankfurt).
• Resend (United States) sends contact and quote requests and the confirmations as email.
• The party that builds and maintains the website for us can access these services for that work.

We use these services based on our legitimate interest in offering a secure, working website (Article 6(1)(f) GDPR).

Data outside Europe

Sanity processes data mainly in Belgium, Sentry stores error reports in Frankfurt and Resend sends email from Ireland. Still, data may end up in the United States: Vercel processes data mainly there, Resend keeps its log there and Sanity also uses servers in the US.

Vercel, Sentry and Resend participate in the EU-U.S. Data Privacy Framework. The European Commission has decided that data held by companies in this framework is adequately protected (Article 45 GDPR). In addition, we have agreed the European Commission's standard contractual clauses with these services and with Sanity (Article 46 GDPR).

How long we keep data

• Stamp card: on your own device, until you clear the website data in your browser
• Visitor statistics: we can look back up to 12 months
• Technical hosting data: briefly, one day in our dashboard
• Error reports: up to 90 days
• Quote selection: on your own device, until you send the request or clear the selection
• Contact and quote requests at Resend: 30 days
• Contact and quote requests in our mailbox: two years after the last contact

Security

The website only works over a secure connection (https). Only the people who manage the website have access to the management systems, each with their own account. We have made security and confidentiality arrangements with the services that process data for us. If you notice something that isn't right, or suspect a security problem, please email us.

No profiles or automated decisions

We don't create visitor profiles and we don't make decisions about you that are taken by a computer alone. We show no ads and we don't sell or rent out data.

Your rights

You have the right to:

• ask which data we hold about you (access)
• have incorrect data corrected
• have data deleted
• have processing restricted
• object to processing based on our legitimate interest
• receive your data in a common file format

Parents and guardians can exercise these rights on behalf of their child. Send your request to info@pikoji.com. We will respond within one month. If a request is complex, it may take two months longer. We will let you know within the first month. Sometimes we ask you to confirm that the request really comes from you.

The stamp card only exists on your own device, and we cannot link the visitor statistics to a person. So we cannot look them up or delete them for you. You can clear the stamp card yourself in your browser settings.

Complaints

If you disagree with how we handle your data, feel free to tell us first, and we'll look for a solution together. You can also lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or with the data protection authority in the country where you live.

Changes

If something changes on the website that affects your data, we will update this statement. The date at the top shows when that last happened.