Privacy Policy

Who is the data controller?

The data controller responsible for processing your personal data is:

• ProvidentCloud B.V.
• KvK: 95824561
• VAT Number: NL867323917B01
• De Nieuwe Erven 3 Unit 14042, 5431 NV Cuijk
• Email: contact@providentcloud.com

What personal data do we process?

We only process personal data that you actively provide to us via the contact form on our website. This includes:

• Name
• Email address
• The content of your message
• IP address (automatically recorded when the form is submitted, for security and fraud-prevention purposes)

We do not use cookies for analytics or tracking, and we do not collect personal data through cookies — see 'Cookies and similar technologies' below.

For what purposes and on what legal basis do we process your data?

We process the data listed above solely to:

• handle and respond to your query or message submitted via the contact form;
• communicate with you about a possible collaboration or our services;
• prevent and detect misuse of, and spam through, the contact form.

The legal basis for this processing is our legitimate interest (Article 6(1)(f) GDPR) in being able to respond to enquiries from (potential) clients, and/or the taking of pre-contractual steps at your request (Article 6(1)(b) GDPR) where your message relates to a possible agreement with us.

Do we share your data with third parties?

We never sell your data to third parties. To make the contact form work, we rely on the following processors, who process personal data only on our behalf and instructions:

• Scaleway S.A.S. — sends the email containing your message to our business mailbox on our behalf. Processing takes place within the European Union (Paris, France region).
• Cloudflare, Inc. (Cloudflare Turnstile) — verifies that a form submission is made by a human rather than automated software (bots/spam). This may involve processing technical data such as your IP address and browser characteristics.

Cloudflare is established outside the European Economic Area (EEA). For transfers of data outside the EEA, Cloudflare applies appropriate safeguards, such as the EU Standard Contractual Clauses. Where required, we have entered into a data processing agreement with our processors in accordance with Article 28 GDPR.

We may also disclose personal data to third parties where legally required to do so, for example under a court order or statutory obligation.

Cookies and similar technologies

Our website does not use cookies for analytics, marketing, or tracking purposes. We do not place cookies to track your browsing behaviour.

Cloudflare Turnstile, which we use to keep spam out of the contact form, may use strictly necessary cookies or similar technologies to verify that a form submission is made by a human. Under Dutch law (Article 11.7a(3) Telecommunicatiewet), this functional use is exempt from the cookie-consent requirement because it is necessary for the security of the service you requested (submitting the contact form).

How long do we retain your data?

We do not retain personal data collected via the contact form for longer than necessary for the purpose for which it was collected. We apply a standard retention period of 12 months after your last contact with us, after which the data is deleted, unless a statutory retention obligation requires a longer period, or there is an ongoing (pre-)contractual relationship that justifies longer retention.

How do we secure your data?

We take appropriate technical and organisational measures to protect your personal data against loss or unlawful processing. For example, we only transmit data in encrypted form (via TLS/HTTPS), we limit access to personal data to those who need it, and we use Cloudflare Turnstile to prevent automated abuse of the contact form.

Your rights

Under the GDPR, you have the following rights in relation to your personal data:

• The right of access to the personal data we process about you;
• The right to rectification of inaccurate or incomplete data;
• The right to erasure ("right to be forgotten") of your data;
• The right to restriction of processing;
• The right to object to processing;
• The right to data portability.

You can send a request to exercise these rights to contact@providentcloud.com. We will respond to your request within one month. To prevent misuse, we may ask you to verify your identity.

If you disagree with how we process your personal data, or with how we have handled your request, you have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

Children

Our website and services are not directed at minors. We do not knowingly collect personal data from individuals under the age of 16. If you believe we have collected data from a minor without appropriate consent, please contact us so that we can delete it.

Changes to this privacy policy

We may amend this privacy policy from time to time, for example in response to changes in our services or in applicable law. The most current version is always available on this page, together with the date it was last updated shown at the top of this page.

Contact

If you have any questions or comments about this privacy policy or about how we handle your personal data, please contact us at contact@providentcloud.com.