Privacy policy

Sophonix B.V. is the controller of the personal data described in this policy.

• Registered office: Laan van Kronenburg 14, 1183 AS Amstelveen, Netherlands
• KvK number: 42046365
• Telephone: +31 6 87705348
• Contact: [email protected]
• Data Protection Officer: B.R van Leeuwaarde, reachable via [email protected]

What data we collect

We keep what we collect minimal and we name every source.

Server logs

Our hosting provider (Hetzner Online GmbH, Germany) records HTTP requests automatically. Each log entry typically contains:

• IP address
• Date and time of request
• Page requested
• HTTP status code
• User agent (browser / device string)
• Referrer (the previous URL, if any)

These logs exist for security, diagnostics, and abuse prevention. They are not used for marketing.

Email correspondence

When you email [email protected], the message and any attachments are stored in our inbox. We use this to respond to you and, where you become a client, to keep a record of the engagement.

Cookies and similar storage

See the Cookie policy for the specific cookies and localStorage entries we use. As of the date above we use:

• A first-party locale cookie (your language preference)
• A first-party sophonix-consent localStorage entry (your record of consent choices)

Both are strictly necessary for the site to function and do not require consent.

Why we use it (lawful bases)

Under GDPR Article 6:

• Server logs — legitimate interest (Article 6(1)(f)): running and securing the site.
• Email correspondence — legitimate interest where you reach out informally; performance of a contract where you become a client (Article 6(1)(b)).
• Strictly necessary cookies and storage — they hold your own preference locally. ePrivacy permits them without consent because they are strictly necessary for the service you requested.
• Analytics and marketing trackers (when added in future) — consent (Article 6(1)(a)), granted via the consent banner.

Automated decision-making

Sophonix B.V. does not take decisions based on automated processing that produce legal effects or similarly significantly affect individuals.

Who we share it with

We share personal data only with the following processors, each under appropriate contracts:

• Hetzner Online GmbH (Germany) — hosting and server logs.

When analytics or marketing trackers are added, this list is updated to name each vendor. We do not, and will not, sell personal data.

International transfers

Hetzner hosts our infrastructure inside the European Economic Area. We do not transfer personal data outside the EEA today. If that changes (for example, an analytics vendor based outside the EEA), this policy will name the transfer and the safeguards used (Standard Contractual Clauses or an adequacy decision).

How long we keep it

• Server logs: 30 days, then deleted.
• Email correspondence: as long as needed to maintain the relationship or comply with legal obligations.
• Consent record (sophonix-consent): until you clear browser storage or revoke via the footer “Manage cookies” link.

Your rights

Under GDPR you have the right to:

• Access the personal data we hold about you
• Rectification — correct anything inaccurate
• Erasure — ask us to delete it
• Restriction — limit how we process it
• Data portability — receive it in a machine-readable format
• Object to processing based on legitimate interest
• Withdraw consent at any time for processing based on consent

To exercise any of these, email [email protected]. We respond within one month.

If you believe we are processing your data unlawfully, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

Changes to this policy

When this policy changes materially, we update the date at the top and, where consent is implicated, prompt you to re-consent via the banner. We do not retroactively apply broader uses of your data; new uses require fresh consent.

Contact

[email protected]