Privacy Policy – Paleon

Effective date: 20 October 2025
Version: 1.0

 

---

 

1. Introduction

This Privacy Policy explains how Handelsbedrijf TB and SJR Solutions, both sole proprietorships established in the Netherlands (“we,” “our,” or “us”), collect, use, and protect your information when you use our mobile application, website, or related services (together referred to as “the App”).

We believe that protecting your privacy and the integrity of your data is essential to earning your trust. This policy outlines in clear and transparent language what information we collect, why we collect it, and what rights you have regarding that information.

By creating an account or using our App, you explicitly agree to the terms of this Privacy Policy. If you do not agree, please do not use the App.

 

---

 

2. About Us

Data Controller:
 Handelsbedrijf TB & SJR Solutions (Both sole proprietorships registered in the Netherlands)
Contact Person: Scott van de Graaf
Official Privacy Contact: info@prehistoricdinosaurhub.com

We act as the Data Controller for all information processed through the App — meaning we determine what data is collected and how it is used.

If you have questions about this policy, data protection, or how we process your personal information, you can contact our privacy representative via the email above.

 

---

 

3. Scope of This Policy

This Privacy Policy applies to:

• The Paleon App and all related services offered by Handelsbedrijf TB & SJR Solutions;
  
  
• The Prehistoric Dinosaur Hub website and associated domains;
  
  
• Any features that involve submitting or viewing fossil photographs, managing collections, reading educational articles, or interacting with AI identification tools;
  
  
• Any communication or marketing related to these services.
  
  

This policy does not apply to third-party services you might access through external links (for example, YouTube, payment providers, or partner platforms). Those services are governed by their own privacy policies.

 

---

 

4. Our Commitment to Privacy

We are committed to complying with all applicable data-protection laws, including:

• The General Data Protection Regulation (GDPR) (EU 2016/679)
  
  
• The Dutch Implementation Act of the GDPR (UAVG)
  
  
• Relevant consumer-protection and electronic-communications regulations
  
  

Our guiding privacy principles are:

1. Transparency — You have the right to know exactly what happens with your data.
   
   

2. Purpose Limitation — We only use your data for clear, legitimate purposes related to our App.
   
   

3. Data Minimisation — We collect only the minimum data needed to deliver our services.
   
   

4. Integrity and Security — We protect your data through encryption, access controls, and secure hosting.
   
   

5. User Control — You can request deletion, correction, or a copy of your data at any time.
   
   

 

---

 

5. Definitions

To make this policy easy to understand:

• “Personal Data” means any information relating to an identifiable person, such as a name, email address, or device ID.
  
  

• “Fossil Photo” means any image uploaded by a user for identification or analysis using the Fossil Scanner AI.
  
  

• “AI Training Data” refers to fossil photos or other image data used solely to improve fossil-recognition models.
  
  

• “You” / “User” means any person using our App, whether free or premium.
  
  

• “Partners” means verified third-party companies that may in the future receive anonymised fossil datasets for AI research and training (only with prior user consent).
  
  

 

---

 

6. Summary of What We Collect

When you use the App, we may collect:

• Account details (name, email address, account ID)
  
  
• Device information (device ID, operating system, crash logs)
  
  
• Payment data (only for premium subscriptions, processed via secure third-party gateways)
  
  
• Location data (approximate, used for fossil-origin mapping and language settings)
  
  
• Fossil photos — after automatic filtering removes any human or identifying elements such as faces, tattoos, or interiors
  
  
• Analytics and cookies — to improve performance and reliability
  
  

All collected data is essential to operate the App and provide accurate fossil-identification results.

 

---

 

7. Purpose and Legal Basis (Overview)

Our data processing is based on three lawful grounds under the GDPR:

• Contractual necessity – to deliver the App’s core features, manage accounts, and process payments.
  
  
• Explicit user consent – for uploading fossil photos, using them for AI training, and future anonymised data sharing.
  
  
• Legitimate interest – for ensuring security, preventing abuse, and performing aggregate analytics.
  
  

Each of these bases is described in detail on Page 4 (“Legal Bases & User Consent”).

 

---

 

8. Your Agreement

By registering, submitting fossil photos, or continuing to use the App, you:

• Confirm that you are at least 16 years old or have parental consent if younger.
  
  
• Consent to our collection and processing of your data in accordance with this policy.
  
  
• Understand that fossil photos may be retained indefinitely for model-training purposes, unless you request deletion.
  
  

What Data We Collect

 

---

 

1. Overview

To deliver the Paleon App and all connected services, we collect several categories of data.
Each category serves a specific and clearly defined purpose. We do not collect more data than is necessary to provide, improve, and secure the App.

 

---

 

2. Categories of Data Collected

a. Account and Identification Data

When you register or log in, we collect and store:

• Your name, email address, and account ID;
  
  
• An automatically generated device ID;
  
  
• Authentication and security tokens that verify your login;
  
  
• Basic subscription status (free or premium).
  
  

This information allows us to maintain your profile, link uploaded fossils to your collection, and provide access to premium features where applicable.

 

---

 

b. Fossil Photos and Related Metadata

When you use the Fossil Scanner, you can upload images for identification or analysis.
Our system performs an automated pre-filtering process that:

• Removes or rejects any photos containing human faces, identifiable body parts, tattoos, household interiors, or other personal/biometric data;
  
  
• Retains only the fossil-specific portion of the image, where identification is possible;
  
  
• Permanently deletes any non-compliant or human-identifiable content before it is reviewed or stored.
  
  

The photos that pass this filter are referred to as “Fossil Photos” in this policy.
They are stored securely in our database and may be used for:

• Fossil recognition and educational display within the App;
  
  

• AI model improvement (“AI Training Data”), after removal of any personal metadata;
  
  

• Future research collaborations or partnerships (only with new, explicit user consent).
  
  

⚠️ We never use photos containing identifiable people or private environments. Those are discarded.

 

---

 

c. Technical and Device Data

To ensure stability and performance, we collect limited device information such as:

• Device type, operating system, and app version;
  
  
• Crash logs, error reports, and diagnostic codes;
  
  
• IP address (used only for approximate location, fraud prevention, and regional settings).
  
  

This helps us detect bugs, secure user sessions, and optimize load times.

 

---

 

d. Payment Information (Premium Users Only)

If you purchase a premium subscription, your payment is processed through external providers (App Store, Google Play, or other authorized gateways).
We do not store or have direct access to full payment details such as credit-card numbers.
We only receive confirmation tokens (e.g., payment success/failure status) needed to activate premium features.

 

---

 

e. Usage, Cookies, and Analytics

We use limited cookies and SDKs (for example, Firebase Analytics) to understand app performance, detect crashes, and improve user experience.
The data collected through analytics is aggregated and anonymized, including:

• Session duration, pages viewed, features used;
  
  
• Device category and general region (non-precise location);
  
  
• Engagement statistics (e.g., how often users access articles or collections).
  
  

You can manage or disable analytics tracking in your device or app settings where applicable.

 

---

 

f. Optional Data You Choose to Share

The App may in the future allow you to:

• Save favorite fossils or articles;
  
  
• Create custom collections;
  
  
• Leave feedback or participate in research surveys.
  
  

These actions are optional and voluntary. Any related data is stored under your account until you choose to delete it.

 

---

 

3. Data We Do Not Collect

We do not collect or store:

• Biometric identifiers such as facial features or fingerprints;
  
  
• Voice recordings, chat logs, or user messages;
  
  
• GPS-level tracking or continuous background location data;
  
  
• Personal documents, camera feeds, or content unrelated to fossils;
  
  
• Any data from users’ photo galleries beyond the single photo they choose to upload.
  
  

If such information is ever accidentally uploaded, it is automatically removed through our filtering system and never used for any purpose.

 

---

 

4. Accuracy and Updates

We rely on you to provide accurate and up-to-date information (e.g., your email address).
If you change or correct your data, our systems automatically update linked records.
If you delete your account, we permanently remove all associated personal data within 30 days, while retaining only anonymized fossil-image data that no longer identifies any user.

How and Why We Use Your Data

 

---

 

1. Primary Purposes of Processing

We process your data only when it is relevant for the delivery, security, or improvement of our services.
Each type of data serves one or more of the following legitimate purposes:

a. To Provide the App and Core Features

• Enabling you to create an account, log in, and access your personal fossil collections.
  
  
• Running the Fossil Scanner and returning scientifically accurate identification results.
  
  
• Managing your saved articles, favorites, and learning materials.
  
  
• Activating premium subscriptions and processing associated payments.
  
  

Without this data (email, account ID, fossil photos, etc.), the App cannot function as intended.

b. To Improve Accuracy and Performance

We use fossil photos (after automatic filtering) to enhance the accuracy and reliability of our AI-based fossil-identification system.
This process—called AI Training—helps the system:

• Better recognize shapes, textures, and fossil categories;
  
  
• Reduce false identifications;
  
  
• Improve learning outcomes for all users.
  
  

All training is done in compliance with data-minimization principles and without storing any personal or identifiable human imagery.

c. To Provide User Support and Communications

• Sending service-related notifications (e.g., password reset, system updates).
  
  
• Responding to technical-support requests or feedback.
  
  
• Notifying you about relevant fossil-related content or new educational materials (only if you opt in).
  
  

d. To Maintain Security and Prevent Abuse

We analyze limited technical data—device IDs, IP regions, and crash logs—to:

• Detect spam, fraudulent use, or misuse of upload tools;
  
  
• Enforce content-filtering rules;
  
  
• Protect users from unauthorized access or data leakage.
  
  

---

 

2. AI Training and Model Improvement

When fossil photos pass our safety filters, they may enter our AI training dataset.
This means that the images (minus any human or contextual identifiers) can be used to teach our machine-learning models to recognize fossils more accurately.

All AI-training data is processed under strict safeguards:

• We retain only fossil-related visual data.
  
  
• All metadata that could identify a person (filenames, EXIF GPS, etc.) is removed.
  
  
• Training occurs within secure, access-controlled environments.
  
  
• The resulting models do not store or “remember” original images—only statistical patterns.
  
  

The goal is continual improvement of our fossil-recognition algorithms for educational and scientific use.

Transparency Notice: We may in the future collaborate with external scientific or technological partners to train AI systems using anonymized fossil datasets.
If this occurs, we will:
• request new explicit user consent before any sharing, and
• publish a clear update in this Privacy Policy.

 

---

 

3. Analytics and Aggregated Data

We use analytics tools (such as Firebase Analytics) to understand how people use our App in general terms—never to track individuals.
Analytics helps us answer questions like:

• Which fossil categories are most often searched?
  
  
• How quickly do scans return results?
  
  
• What percentage of users complete identification tasks?
  
  

All such data is aggregated and anonymized. It cannot be linked to a specific person or account.

 

---

 

4. Legal Basis for Use

Each processing activity is supported by one or more lawful bases under the GDPR:

You can withdraw consent at any time by contacting us at info@prehistoricdinosaurhub.com. Withdrawal does not affect the legality of processing prior to that moment.

 

---

 

5. Future Purposes and Compatibility

If we introduce new features (e.g., fossil marketplace, partner datasets, community uploads), we will first verify that each new purpose is compatible with the original ones described here.
If not, we will update this policy and ask for fresh consent.

We will never sell personal data or allow third parties to use your images for marketing, advertising, or surveillance.

 

---

 

Under the General Data Protection Regulation (GDPR), every processing activity must be justified by a lawful basis.
We only process your information when we have a clear and legitimate reason to do so.

The three legal bases that apply to our services are:

1. Contractual necessity – we need certain data to perform our agreement with you and deliver the App’s core functions.
   
   

2. Explicit user consent – we use some data only when you clearly agree (for example, fossil photos used for AI training).
   
   

3. Legitimate interest – we process limited technical data to maintain security and performance.
   
   

 

---

 

2. Contractual Necessity

We collect and process some data because it is required to perform our contract with you — in other words, to deliver the service you requested when using the Paleon App.

This includes:

• Creating and maintaining your user account;
  
  
• Providing fossil-identification results through the AI scanner;
  
  
• Allowing you to save articles, collections, and photos within your profile;
  
  
• Processing payments for premium subscriptions via the App Store or Google Play;
  
  
• Providing customer support and notifications related to your account.
  
  

Without this data (such as your email, account ID, or fossil uploads), the App cannot function properly.
This processing is lawful under Article 6(1)(b) GDPR — Contractual necessity.

 

---

 

3. Explicit User Consent

Certain processing operations require your explicit permission before they occur.
You will always be clearly informed and asked to accept before such actions happen.

These operations include:

• Uploading fossil photos to our servers;
  
  
• Using those photos as AI training data to improve fossil-recognition accuracy;
  
  
• Retaining fossil photos indefinitely for long-term scientific and educational improvement;
  
  
• Any future sharing of anonymized fossil datasets with research partners or third parties.
  
  

When you first launch the App or create an account, you are presented with:

• A consent dialog that links directly to this Privacy Policy;
  
  
• A checkbox confirming that you agree to the collection and use of data as described;
  
  
• Optional toggles for analytics, marketing updates, or future research sharing (where applicable).
  
  

Only when you accept these terms can the Fossil Scanner and core features operate.

 

---

 

4. Withdrawing Consent

You may withdraw your consent at any time without penalty.
To do so, you can:

• Send an email to info@prehistoricdinosaurhub.com with the subject line “Withdraw Consent”; or
  
  
• Use any in-app setting or privacy option that allows you to disable data collection.
  
  

After withdrawal, we will:

1. Stop using your fossil photos for AI training or any other non-essential purpose.
   
   

2. Delete or anonymize previously stored photos within 30 days (unless required for contractual or legal reasons).
   
   

3. Retain only non-identifiable metadata or statistics needed for system integrity.
   
   

Withdrawal does not affect any processing that took place before consent was withdrawn.

 

---

 

5. Legitimate Interest

We also process some limited data based on legitimate interest under Article 6(1)(f) GDPR.
This applies when processing is necessary for the security, stability, or analysis of our services and does not override your privacy rights.

Examples include:

• Logging crashes and performance issues;
  
  
• Preventing spam, abuse, or hacking attempts;
  
  
• Collecting aggregate usage statistics to improve functionality.
  
  

We always balance our legitimate interests against your rights and expectations.
If you believe that our legitimate-interest processing affects you unfairly, you can object at any time (see your rights on Page 5).

 

---

 

6. Parental Consent (Children Under 16)

Users under 16 years of age may only use the App with verifiable parental consent.
We rely on a parent or guardian’s approval through the account-registration process or confirmation email.
If we learn that a child has used the App without proper consent, we will immediately delete the associated data.

 

---

 

7. Future Legal Updates

If our processing activities or legal bases change (for example, if we begin sharing fossil datasets with partners), we will:

• Notify all users before the change takes effect; and
  
  
• Request new explicit consent when required by law.
  
  

We will never rely on silence, pre-ticked boxes, or inactivity as proof of consent.

1. Data Retention (How Long We Keep Your Information)

We keep data only for as long as it is needed for the purposes described in this Privacy Policy or as required by law.
Because our fossil-identification system depends on long-term AI training, some fossil photos are stored indefinitely unless you request deletion.

After the relevant period expires, data is securely deleted or irreversibly anonymized.

 

---

 

2. User-Initiated Deletion (Requests for Erasure)

You have the right to request the deletion of your data at any time.
To do so, please send an email to info@prehistoricdinosaurhub.com with the subject “Delete My Data”.

We will verify your identity (by email confirmation or account check) and remove the following within 30 days:

1. Your account and associated personal details;
   
   

2. All fossil photos and collections linked to your profile;
   
   

3. Any metadata that could connect you to our AI-training records.
   
   

Anonymized data that cannot identify you (aggregated AI statistics or model weights) may be retained, as these no longer qualify as personal data under the GDPR.

 

---

 

3. User Rights Under the GDPR

You have the following rights regarding your data:

1. Right of Access – Request a copy of the personal data we hold about you.
   
   

2. Right to Rectification – Correct inaccurate or incomplete data.
   
   

3. Right to Erasure (“Right to be Forgotten”) – Request deletion as described above.
   
   

4. Right to Restriction of Processing – Ask us to pause data use while a dispute is resolved.
   
   

5. Right to Data Portability – Obtain your data in a structured, machine-readable format to transfer elsewhere.
   
   

6. Right to Object – Object to processing based on legitimate interest or direct communications.
   
   

7. Right to Withdraw Consent – At any time, without affecting prior lawful processing.
   
   

To exercise any of these rights, email us at info@prehistoricdinosaurhub.com. We aim to respond within 30 days of receipt.

 

---

 

4. Verification and Response Time

Before processing a rights request, we may ask you to verify ownership of the account or email address.
If your request is complex or involves large datasets, we may extend the response period by up to 60 days, but we will notify you in advance.

 

---

 

5. Limitations and Exceptions

We may decline a request only when there is a legal obligation to keep data (e.g., tax records) or when it is technically impossible to link anonymized data back to an individual.
In such cases, we will explain the reason and confirm which data was retained.

 

---

 

6. Consequences of Deletion

Deleting your account or withdrawing consent may limit or disable parts of the App, including access to previous collections, photos, and premium features.
We cannot restore data once it has been permanently deleted.

 

---

 

7. Automated Decision-Making and Profiling

We do not perform automated decision-making that produces legal effects on users.
Our AI models perform only object identification (fossils vs. non-fossils) and do not profile individuals or infer personal attributes.

 

---

 

8. How to Lodge a Complaint

If you believe we have handled your data incorrectly, you can contact us first at info@prehistoricdinosaurhub.com.
If you are not satisfied with our response, you have the right to file a complaint with the Dutch supervisory authority:

Autoriteit Persoonsgegevens
Website: https://autoriteitpersoonsgegevens.nl
Phone: +31 (0)70 888 85 00

1. Data Hosting and Storage Location

Your data is hosted on secure cloud infrastructure provided by Supabase and Google Firebase, both of which comply with major international security standards (ISO 27001, SOC 2 Type II, GDPR).
We aim to store all personal data within the European Economic Area (EEA) whenever possible.

At this time:

• Supabase projects are hosted in a European data centre (for example eu-west or eu-central);
  
  
• Firebase Services such as Authentication and Firestore may replicate data to multiple global data centres, including the United States;
  
  
• App Store and Google Play handle purchase and billing information under their own regional compliance frameworks.
  
  

If any data is transferred outside the EEA, we use the European Commission’s Standard Contractual Clauses (SCCs) to ensure an equivalent level of protection.

 

---

 

2. Data Security Practices

We employ a combination of technical, organizational, and procedural safeguards to prevent unauthorized access, alteration, or loss of data.
Our security program includes:

• Encryption in transit and at rest (HTTPS/TLS 1.3 and AES-256);
  
  
• Access control based on the principle of least privilege;
  
  
• Role-based authorization (RBAC) for internal staff and contractors;
  
  
• Regular backups and disaster-recovery testing;
  
  
• Audit logging and monitoring of critical systems;
  
  
• Automatic session timeouts and token expiration;
  
  
• Secure key management and API credential rotation;
  
  
• Vulnerability scanning and code review for each release.
  
  

We continuously update our security posture in line with industry best practices and European regulations.

 

---

 

3. Organizational Controls

All personnel with access to user data receive training on data protection, confidentiality, and secure-handling procedures.
Access is granted only to staff whose roles require it, and all employees sign confidentiality agreements.
Third-party processors are contractually bound to maintain equivalent levels of security.

 

---

 

4. International Data Transfers

When data is processed outside the EEA — for example through Firebase’s global infrastructure — the following safeguards apply:

• Standard Contractual Clauses (SCCs) approved by the European Commission;
  
  
• Technical protections, including encryption and pseudonymization before transfer;
  
  
• Organizational controls to restrict foreign access;
  
  
• Vendor risk assessments to verify compliance with GDPR.
  
  

We review all sub-processors annually to ensure continued adequacy and lawful transfer mechanisms.

 

---

 

5. Breach Notification and Incident Response

In the unlikely event of a data breach that affects your personal information, we will:

1. Notify the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) within 72 hours of discovery;
   
   

2. Inform affected users without undue delay;
   
   

3. Provide details on the nature of the breach, the data involved, and mitigation steps;
   
   

4. Take immediate corrective measures to prevent recurrence.
   
   

 

---

 

6. Retention of Security Logs

Security logs and access records are kept for a maximum of 180 days for auditing and incident response purposes, after which they are deleted or aggregated.

 

---

 

7. User Responsibilities

While we maintain industry-standard security, you also share responsibility for protecting your data:

• Keep your passwords confidential and unique;
  
  
• Use two-factor authentication (if available);
  
  
• Report suspicious activity to info@prehistoricdinosaurhub.com.
  
  

1. Use of the App by Children

The Paleon App is intended for users of all ages who are interested in fossils and prehistory.
Because we process certain information (such as fossil photos and account data), users under 16 should use the App only with parental or guardian approval.

We do not actively verify users’ ages or collect identification to confirm parental consent.
By creating an account or using the App, each user represents and warrants that:

• they are at least 16 years old, or
  
  
• they have obtained permission from a parent or legal guardian to use the App.
  
  

We rely on this representation in good faith. Parents remain responsible for monitoring their child’s activity and use of the App.

If we become aware that a child under 16 has used the App without parental approval, we will immediately delete the associated account and all related data.

 

---

 

2. Parental Rights and Responsibilities

Parents or guardians may at any time:

• Request access to or deletion of their child’s account and data;
  
  
• Withdraw consent for fossil photo uploads or AI training;
  
  
• Ask questions about how data is processed.
  
  

Such requests can be made by email to info@prehistoricdinosaurhub.com.
Identity verification may be required to protect both the child and the requester.

 

---

 

3. Prohibition of Human or Personal Images

Our Fossil Scanner is strictly intended for photos of fossils and similar objects.
We actively strive to prevent the upload, storage, or processing of any images containing identifiable human or personal elements.

Users are fully responsible for ensuring that the photos they upload contain only fossil material and no:

• Faces, body parts, or other identifiable human features;
  
  
• Children, family members, or private individuals;
  
  
• Home interiors, documents, addresses, or personal items.
  
  

Our systems are designed to automatically detect and filter out such content.
However, while we make every reasonable technical and organizational effort to block and delete these images before storage or AI processing, we cannot guarantee that this will never occur under any circumstance.

If an image containing human or personal content is later identified, it will be promptly and permanently deleted, and the associated account may be subject to review.

 

---

 

4. Automatic Filtering Process

Each uploaded image undergoes an automated review that analyses:

• The presence of human figures, skin tones, or facial patterns;
  
  
• Backgrounds or objects typical of indoor environments;
  
  
• Modern or unrelated elements that suggest the image is not fossil-related.
  
  

Images flagged by the filter are rejected and not processed by the AI.
Only images that appear to meet fossil-specific criteria are stored for identification or model improvement.

We continually refine these detection systems to minimize the chance that personal imagery is ever processed, but users remain ultimately responsible for complying with this rule.

 

---

 

5. Educational Transparency

We encourage families, teachers, and parents to use the App as an educational tool.
Our website and app explain in plain language how the Fossil Scanner works, what data is stored, and how parents can request deletion.

 

---

 

6. Consequences of Policy Violation

Repeated or deliberate uploads of non-compliant images may lead to account suspension or removal.
We reserve the right to block further uploads from any account that violates this policy.

1. Third-Party Services and Processors

To operate the Paleon App and related platforms, we work with trusted third-party service providers (“processors”) that help us manage storage, authentication, analytics, and other technical operations.

These include:

• Supabase – database and authentication infrastructure;
  
  
• Google Firebase – hosting, analytics, and performance monitoring;
  
  
• FlutterFlow – front-end development environment;
  
  
• OpenAI API – language and AI-based analysis features;
  
  
• Apple App Store and Google Play Store – payment processing and distribution;
  
  
• Additional partners that support backups, crash logging, and cloud infrastructure.
  
  

Each processor operates under a Data Processing Agreement (DPA) that ensures compliance with the General Data Protection Regulation (GDPR) and equivalent international standards.
We carefully select and monitor all service providers to guarantee appropriate data-protection measures are in place.

We do not sell, rent, or trade personal data to any third party.
If we ever choose to share anonymized fossil datasets with external research partners, we will first:

1. Update this Privacy Policy, and
   
   

2. Obtain new explicit user consent before any sharing occurs.
   
   

 

---

 

2. Future Changes and Policy Updates

We may occasionally revise this Privacy Policy to reflect:

• New legal requirements;
  
  
• Updates to our technology or AI systems;
  
  
• New features (such as marketplace, collections, or research collaborations).
  
  

When updates are significant, we will:

• Announce them clearly in the App or via email;
  
  
• Provide a summary of key changes;
  
  
• Request new user consent if required by law.
  
  

The date of the latest revision will always be displayed at the top of this document.
By continuing to use the App after an update takes effect, you agree to the revised terms.

 

---

 

3. Liability and Limitation

While we take every reasonable measure to protect your data and ensure lawful processing, no system is completely free of risk.
We cannot guarantee absolute security against unauthorized access, data loss, or human error.

By using the App, you acknowledge and agree that:

• You are responsible for the accuracy of the information and photos you provide;
  
  
• You will not upload material that violates this Privacy Policy or any law;
  
  
• Handelsbedrijf TB is not liable for damages caused by user misuse, third-party breaches outside our control, or technical malfunctions inherent to internet services.
  
  

Nothing in this policy limits your legal rights under the GDPR or Dutch law.

 

---

 

4. Governing Law and Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of the Netherlands.
Any disputes arising from or relating to this policy shall fall under the exclusive jurisdiction of the competent courts in the Netherlands.

 

---

 

5. Contact Information

If you have questions, concerns, or requests related to your personal data, please contact:

Data Controller:
 Handelsbedrijf TB & SJR Solutions (Sole Proprietorships)
Attn: Privacy Officer – Scott van de Graaf
Email: info@prehistoricdinosaurhub.com

We aim to respond to all inquiries within 30 days.

 

---

 

6. Supervisory Authority

If you are not satisfied with our handling of your data, you can submit a complaint to the Dutch supervisory authority:

Autoriteit Persoonsgegevens
Website: https://autoriteitpersoonsgegevens.nl
Phone: +31 (0)70 888 85 00

 

---

 

7. Final Statement

By using the Paleon App, you confirm that you have read, understood, and agreed to this Privacy Policy in full.
Your continued use of our services constitutes your acceptance of these terms.

Thank you for trusting us with your data and for contributing to the advancement of fossil science and education.

 

---

 

Effective Date: 20 October 2025
Version: 1.0 — © Handelsbedrijf TB & SJR Solutions, The Netherlands