Privacy Policy

Introduction

noventis B.V. ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website noventis.top or use our IT infrastructure services.

As a Dutch company registered under KvK number 59047183, we comply with the General Data Protection Regulation (GDPR) and Dutch data protection laws. This policy applies to all personal data we process in connection with our business operations.

Data Controller

noventis B.V. acts as the Data Controller for the personal data we process. Our contact details are:

Data Collection

The data we collect includes personal information that you provide directly to us and information automatically collected when you use our website and services. We collect this information through various means including our contact forms, email communications, phone calls, and website analytics.

Information You Provide

• Contact information (name, email address, phone number)
• Company information (company name, job title)
• Service enquiries and project requirements
• Communication preferences
• Any other information you choose to provide

Automatically Collected Information

• IP address and location data
• Browser type and version
• Device information and operating system
• Website usage data and analytics
• Cookies and similar tracking technologies

How We Use Your Data

We explain how we use your information to provide and improve our IT infrastructure services, communicate with you, and fulfil our business obligations. The use of your data is always based on a lawful basis under GDPR.

Primary Uses

• Providing IT infrastructure services and support
• Responding to your enquiries and communications
• Processing service requests and project management
• Sending important service updates and notifications
• Improving our services based on feedback and usage patterns

Legal Basis for Processing

• Contract performance: To provide services you have requested
• Legitimate interests: To improve our services and business operations
• Consent: For marketing communications (where applicable)
• Legal obligation: To comply with applicable laws and regulations

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With trusted service providers who assist in our business operations
• When required by law or to protect our legal rights
• With your explicit consent for specific purposes
• In connection with a business transfer or acquisition

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, and resolve disputes. Specific retention periods include:

• Contact enquiries: 3 years from last contact
• Service contracts: 7 years after contract completion
• Website analytics: 26 months maximum
• Marketing data: Until consent is withdrawn

Your Rights Under GDPR

As a data subject under GDPR, you have several rights regarding your personal data:

• Right of access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data
• Right to restrict processing: Request limitation of data processing
• Right to data portability: Request transfer of your data
• Right to object: Object to certain types of processing
• Right to withdraw consent: Withdraw consent at any time

To exercise any of these rights, please contact us at privacy@noventis.top. We will respond to your request within 30 days.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Staff training on data protection procedures
• Incident response and breach notification procedures

Cookies and Tracking

Our website uses cookies and similar technologies to improve functionality and user experience. For detailed information about our use of cookies, please see our Cookie Policy.

International Data Transfers

As a company based in the Netherlands, we primarily process data within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete such information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

Contact Information

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us using the information below:

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we have not handled your personal data appropriately.