1. Who is responsible?
App & People B.V. is responsible for the processing of personal data described in this statement.
2. What information do we process?
When you use the contact form, we may process your name, organisation, work email address, selected topic and message. We also process correspondence resulting from your enquiry.
For security and troubleshooting, technical information may be processed, including your IP address, browser type, device information and the outcome of the anti-spam check. Do not submit passwords, medical information or other sensitive data through the form.
3. Why do we process this information?
We use your information to assess and respond to your enquiry and, where relevant, prepare a conversation, proposal or possible engagement. We rely on our legitimate interest in handling business enquiries, steps requested before a possible agreement and compliance with legal obligations.
We do not use your contact details for newsletters or unsolicited marketing without a separate valid legal basis.
4. Who receives the information?
Access is limited to people and service providers who need the information to handle your enquiry. We use Cloudflare for website delivery and security. The contact form sends messages through our existing TransIP mail service and delivers them to mailboxes provided by TransIP and Google. They process data according to their respective roles and service agreements.
Some providers may process information outside the European Economic Area. Where this occurs, we use appropriate GDPR safeguards made available for the service, such as European Commission-approved standard contractual clauses.
5. How long do we retain information?
We generally retain a standalone enquiry for no more than 24 months after the last substantive contact. If a customer, supplier or contractual relationship develops, relevant records may be kept longer to perform agreements and meet legal accounting and retention duties. Technical security data follows the retention periods of the relevant provider.
6. Cookies and security technology
This website does not use marketing cookies, advertising pixels or analytics cookies. We also do not store a language preference or visitor profile in your browser.
The contact form is protected by Cloudflare Turnstile to identify and block automated abuse. This may involve processing technical security signals, including your IP address, TLS and browser-connection characteristics, user agent, device and browser information, the public site key and the associated website origin. App & People does not use this information for advertising or marketing profiles.
App & People uses Turnstile on the basis of its legitimate interest in securing the form and website. Cloudflare processes security signals as a processor on behalf of App & People when providing this protection. According to the Turnstile Privacy Addendum, Cloudflare also processes certain signals as an independent controller to improve Turnstile. Turnstile uses only security technology or cookies that are strictly necessary for this protection. Because we do not use non-essential cookies, we currently do not display a consent banner.
7. Your privacy rights
You can ask us for access to, correction of or deletion of your personal data. Depending on the circumstances, you may also request restriction, object to processing or request data portability. We may request additional information to verify your identity.
8. Contact and complaints
To make a privacy request, use our contact form, select ‘A general conversation’ and begin your message with ‘Privacy request’. You may also lodge a complaint with the Dutch Data Protection Authority. We welcome the opportunity to address your concern first.
9. Changes
We update this statement when our website or data processing changes. The current version will always be available on this page.