Your data, handled with care.

1. Who we are

The controller for personal data described here is Eunoriq Software B.V., a private limited company established in the Netherlands, registered with the Dutch Chamber of Commerce (KvK) under number 42074788, with its address at Dr. P. Cuyperslaan 9, 2101 VB Heemstede, the Netherlands. Contact for privacy questions: koen.engels@eunoriq.com, subject “Privacy”.

2. Scope

This statement covers this website, email contact with us, interest registrations (for example for Qord), consulting and engineering engagements, and pilots. Our products have their own privacy statements with product-specific details, which take precedence for that product:

• Calendrate — calendrate.ai/privacy
• Triangulate — in development; a product privacy statement will be published before public launch.

3. What we process and why

• Visiting this website. We do not use analytics, advertising or tracking cookies. Our hosting provider processes technical data (IP address, browser type, time of request) to deliver the site and keep it secure. The site loads fonts from Google Fonts, which means your browser contacts Google’s servers.
• Contacting us. When you email us we process your name, email address, the content of your message and any details you choose to share, to answer you and follow up.
• Interest registrations. If you register interest (for example in Qord or a pilot) we keep your contact details and your stated interest to inform you. Registering is without obligation and is not an offer or investment.
• Customers, partners and suppliers. Contact and billing details of the people we work with, contracts and correspondence, to deliver and administer our services.

4. Legal basis

• Contract (GDPR Art. 6(1)(b)) — to prepare and perform an agreement with you.
• Legitimate interest (Art. 6(1)(f)) — answering questions, running and securing this website, and maintaining business relationships.
• Consent (Art. 6(1)(a)) — interest registrations and updates; you can withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)) — keeping financial records as Dutch tax law requires.

5. How long we keep it

• Correspondence — up to 24 months after the last contact, unless it belongs to a contract.
• Interest registrations — until you withdraw, or at most 24 months after the related launch.
• Contracts and invoices — 7 years, the Dutch statutory retention period for financial records.
• Website server logs — kept by the hosting provider for a short period for security only.

6. Who receives your data

We do not sell personal data and do not use it for profiling or automated decisions with legal effect (Art. 22). We share data only with service providers that work for us under a data processing agreement (Art. 28):

• Google Workspace (Google Cloud EMEA Ltd.) — email and documents.
• Vercel — hosting of this site.
• Google Fonts — web fonts for this site.
• Cal.com — scheduling, only if you book a call through our booking link (name, email, chosen time and any notes).
• Our accountant and, where required, tax authorities.

7. International customers and transfers

We are a Dutch company, so the GDPR applies to all personal data we process — also when you live outside the European Union. Where a provider processes data outside the European Economic Area, we rely on an EU adequacy decision or the European Commission’s Standard Contractual Clauses, with additional safeguards where needed.

If you live outside the EU, your local law may give you additional or different rights — for example in the United Kingdom (UK GDPR), Switzerland, the United States (such as the California Consumer Privacy Act), Brazil (LGPD) or India (DPDP Act). We honour those rights on request. We do not sell or “share” personal information as defined in those laws.

8. Your rights

You can ask us for access to, correction, deletion or a copy (portability) of your personal data, object to processing based on legitimate interest, restrict processing, and withdraw consent at any time. Email us with subject “Privacy”. We answer as soon as possible and within one month at the latest (Art. 12(3)); we may ask you to confirm your identity.

You may lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or with the supervisory authority where you live or work. We would appreciate the chance to resolve your concern first.

9. Security

We protect personal data with appropriate technical and organisational measures, including encrypted connections, access limited to the people who need it, and secrets kept out of source code.

10. Children

This website and our business services are not aimed at children under 16. We do not knowingly collect their personal data here.

11. Changes

We may update this statement. The date at the top shows the latest version; material changes will be announced on this page.