Skip to content
Atech CONSULTANCY

Legal

Privacy Policy

Last updated: 15 March 2026

This policy explains how Atech Consultancy BV collects, uses, and protects your personal data.

1. Who We Are

Atech Consultancy BV is a systems architecture and engineering consultancy registered in the Netherlands.

Atech Consultancy BV is the data controller for personal data processed through our website and services.

2. What Data We Collect

Contact form submissions

When you submit a contact form, we collect your name, email address, company name, and message content.

Payment data

Payments are processed by Stripe, Inc., which acts as a data processor on our behalf for payment transactions. We do not store credit card numbers or other sensitive payment details on our servers. See Stripe's privacy policy for details on how Stripe handles payment data.

Analytics

We use Umami, a privacy-focused analytics platform that we self-host. Umami operates without cookies by default and does not use any tracking cookies. Analytics data is anonymized and aggregated. No personal identifiers are collected through analytics.

Cookies

We use necessary cookies for site functionality (session management, security). Optional analytics cookies require your consent before they are placed.

Service data

Data processed in the course of delivering our consultancy services is governed by separate service agreements between Atech Consultancy BV and the client.

Product data

Data processed through our products, MarketRaidar and TraceFlow, is governed by their respective privacy policies, available on their product websites.

3. Why We Collect It (Legal Basis)

Under the GDPR, we rely on the following legal bases for processing your personal data:

  • Consent (Article 6(1)(a)): For analytics cookies. You can withdraw consent at any time.
  • Contract performance (Article 6(1)(b)): For processing your inquiries, delivering contracted services, and processing payments.
  • Legal obligation (Article 6(1)(c)): For retaining payment and tax records as required by Dutch tax law.
  • Legitimate interest (Article 6(1)(f)): For improving our website and maintaining security. We balance our interests against your rights and freedoms.

4. How We Use Your Data

We use your data for the following purposes:

  • Responding to your inquiries and contact form submissions
  • Delivering contracted consultancy and engineering services
  • Processing payments for services rendered
  • Improving our website based on anonymized usage patterns

We do not sell your data to third parties. We do not use your data for automated profiling or decision-making.

5. Data Processors (Third Parties)

We share personal data with the following third-party processors when necessary to deliver our services:

  • Stripe (payments). Stripe, Inc. acts as a data processor for payment transactions. Stripe is based in the United States and certified under the EU-US Data Privacy Framework. See Stripe's privacy policy.
  • Hosting provider: Hetzner Online GmbH (Germany). Our website and services are hosted on infrastructure that complies with applicable data protection requirements.
  • Umami (analytics). Self-hosted on our own infrastructure. No analytics data leaves our servers or is shared with third parties.

6. International Data Transfers

Stripe operates globally. Data transfers to the United States are covered by the EU-US Data Privacy Framework, ensuring an adequate level of data protection.

Where we use processors outside the European Economic Area (EEA), we ensure appropriate safeguards are in place. These may include Standard Contractual Clauses approved by the European Commission, or transfers to countries with an adequacy decision.

7. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy:

  • Contact form submissions: 2 years from the date of submission
  • Payment records: 7 years, as required by Dutch tax law (Algemene wet inzake rijksbelastingen)
  • Analytics data: 26 months
  • Service data: As specified in the applicable service agreement

After the retention period expires, data is securely deleted or anonymized.

8. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your data (right to be forgotten), subject to legal retention obligations.
  • Portability: Receive your data in a structured, commonly used, machine-readable format.
  • Objection: Object to processing based on legitimate interest.
  • Restriction: Request that we restrict the processing of your data in certain circumstances.
  • Withdrawal of consent: Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at info@atechcon.nl. We will respond to your request within 30 days. If we need more time, we will inform you of the reason and the expected timeline.

If you are not satisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). See Section 11 below.

9. Cookies

Our website uses the following types of cookies:

  • Necessary cookies: Required for core site functionality, session management, and security. These cookies cannot be disabled.
  • Optional analytics cookies: Used for anonymized usage analytics. These are only placed after you give consent through our cookie banner.

Our cookie banner gives you granular control over which optional cookies are active. You can change your cookie preferences at any time by clicking the cookie settings button on the site.

10. Changes to This Policy

We may update this privacy policy to reflect changes in our practices, legal requirements, or services. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

11. Complaints

If you believe we have not handled your personal data appropriately, you have the right to file a complaint with the Dutch Data Protection Authority:

We encourage you to contact us first at info@atechcon.nl so we can try to resolve your concern directly.

12. Contact

For any privacy-related questions or requests, please reach out to us:

  • Email: info@atechcon.nl
  • Postal address: Atech Consultancy BV, Tolhuislaan 223, 3072LP Rotterdam, Netherlands