Legal
Privacy Policy
Draft for legal review. This is a working template that reflects how the website operates. Before publication it should be reviewed by qualified counsel and the placeholders (KvK number, addresses, retention periods, and the final list of processors) confirmed.
Last updated: to be set on launch.
1. Who we are (data controller)
DataAxis B.V. ("DataAxis", "we", "us") is the controller responsible for your personal data. We are based in Delft, The Netherlands.
- Registered name: DataAxis B.V.
- Address: [registered address], Delft, The Netherlands
- Chamber of Commerce (KvK): [KvK number]
- Contact: info@dataaxis.nl
2. The personal data we process
We keep data collection to a minimum. Depending on how you use this site, we may process:
- Contact data — when you submit the contact form: your name, company, email address, project type, and the content of your message.
- Scheduling data — if you book a meeting, the booking provider processes the details you enter (name, email, chosen time).
- Technical & usage data — aggregated, privacy-friendly analytics (e.g. pages viewed, approximate country, device type) that do not identify you and do not use tracking cookies.
3. Why we process it and our legal basis
We process personal data for the following purposes, under the following GDPR legal bases:
- To respond to your enquiry (contact form, email) — based on our legitimate interest in answering prospective clients, and to take steps at your request prior to entering a contract.
- To schedule and hold meetings — based on taking steps at your request and our legitimate interest in business development.
- To understand and improve our website — based on our legitimate interest in operating an effective website, using analytics that do not track individuals.
4. How long we keep it
We retain contact and scheduling data only as long as needed to handle your enquiry and any resulting business relationship, after which it is deleted or anonymised. Indicative periods: enquiries that do not lead to engagement are kept for up to [12 months]; records relating to engagements are kept as required by applicable law. Aggregated analytics contain no personal data.
5. Service providers (processors) we use
We share data only with service providers that help us run this site and our business, under appropriate data-processing agreements, and only as needed:
- Hosting — our website host serves the site and processes request logs.
- Email delivery — our transactional email provider delivers contact-form messages to us.
- Meeting scheduling — our booking provider processes the details you enter to schedule a call.
- Content management — our headless CMS stores the website's (non-personal) content.
- Analytics — our privacy-friendly, cookieless analytics provider.
The final, named list of processors will be confirmed before publication.
6. International transfers
We prefer providers that store data within the EU/EEA. Where a provider processes data outside the EEA, we rely on an adequacy decision or appropriate safeguards such as the European Commission's Standard Contractual Clauses.
7. Your rights
Under the GDPR you have the right to:
- • Access your personal data
- • Rectify inaccurate data
- • Erase your data ("right to be forgotten")
- • Restrict processing
- • Data portability
- • Object to processing
To exercise any of these, email info@dataaxis.nl. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).
8. Cookies
This site is designed to minimise cookies and uses cookieless analytics. See our Cookie Statement for details.
9. Security
We apply appropriate technical and organisational measures to protect personal data, including encryption in transit (HTTPS) and limiting access to those who need it.
10. Changes to this policy
We may update this policy from time to time. The "last updated" date above reflects the most recent revision.