Who we are
DeKrypt B.V., Parnassusweg 999, 1082 LZ Amsterdam, Netherlands. KVK 94075328, BTW NL866626827B01. For anything in this statement, including a request to see, correct or delete your data, write to [email protected] and a person will answer.
What we collect
We collect nothing by watching you. There is no analytics on this site, no advertising network and no tracking pixel.
When you send a meeting request we receive what you typed: your organisation and, if you give them, its registration number and website; your name and role; your work email address; your country and the size of your organisation; and what you told us you are trying to solve. The contact form asks for less: a name, an organisation, an address, a subject and a message.
Both forms offer one thing you do not type: a box, unticked, that sends your location and time zone — the region your browser reports, such as Europe/Vienna, and how far that is from UTC — so that whoever answers knows what hour it is where you are. Nothing is read from your browser unless you tick it, and the basis is your consent: leave it alone and there is nothing to withdraw. It travels with the notification to us and is stored nowhere else.
We ask for a work address and refuse addresses from free providers. When one is refused we record the domain and the reason, never the address itself, so we can see how often the rule turns someone away.
Why we hold it
A meeting request is a decision record. We use it to decide whether to meet, to prepare for that meeting, and to remember what was decided. The basis is our legitimate interest in assessing business contact, and, once we work together, the performance of a contract.
We do not sell your data, we do not share it for marketing, and we do not use it to send you anything you did not ask for.
How long we keep it
A request we decline is deleted within twelve months of the decision. A request that leads to a working relationship is kept for as long as that relationship lasts and for seven years afterwards, which is the retention Dutch law requires of business records. Refusal records — a domain and a reason, with no address — are kept for twelve months.
Who else is involved
Cloudflare, Inc. sits in front of this site and provides the human check on our forms; it processes your IP address and a challenge token to tell a person from a script. Our servers run with a commercial hosting provider inside the European Union. Both act as processors under a data processing agreement and use nothing for their own purposes. We will name the hosting provider on request.
Our own systems are in the European Union. Nothing is stored outside it.
Cookies
This site sets no cookies. Your language and theme choices are kept in your own browser and never sent to us; clearing your browser data removes them.
Your rights
You can ask for a copy of what we hold about you, to correct it, to delete it, to restrict what we do with it, or to object to our holding it at all. Write to [email protected]. If our answer does not satisfy you, you can complain to the Autoriteit Persoonsgegevens, the Dutch data protection authority.