Enkodo Privacy Statement

1. Introduction

Welcome to Enkodo's privacy statement. We respect your privacy and are committed to protecting your personal data. This privacy statement informs you about how we handle your personal data when you visit our website or use our services, and tells you about your privacy rights and how the law protects you.

2. Data Controller

Enkodo Enkodo is the data controller and responsible for your personal data.

Contact details:

• Address: Boterdiep 69-1, 9712 LK Groningen, The Netherlands
• Email: [email protected]
• Phone: 06 22 3456 55
• Chamber of Commerce: 59119217

3. Personal Data We Collect

We may collect, use, store and transfer the following categories of personal data:

3.1 Data you provide to us

• Contact details through our contact form (name, email address, phone number, company name, message)
• Project data that you share with us during the execution of our services

3.2 Data we automatically collect

• Analytical data about your visit to our website via Matomo and Umami
• Technical data such as IP address, browser type, device type, and operating system

3.3 Data we may access during projects

• Test accounts and user data in app development projects
• Customer data when performing migrations or maintenance work

4. Purposes of Processing

We process your personal data for the following purposes:

• To provide and perform our services to you
• To respond to your questions and requests
• To inform you about our services
• To improve and secure our website
• To comply with legal obligations

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Performance of a contract: when processing is necessary for the performance of a contract to which you are a party
• Legitimate interest: when processing is necessary for our legitimate interests, such as improving our services
• Legal obligation: when processing is necessary to comply with a legal obligation
• Consent: when you have given consent to the processing

6. Sharing with Third Parties

We only share your personal data with service providers that are necessary for the execution of our services, such as:

• Hosting providers
• Email services (MailerSend)
• Project management tools (Todoist)

These parties process data only according to our instructions and have implemented appropriate technical and organizational measures to protect your data.

7. Retention Periods

We retain your personal data for as long as necessary for the purposes for which they were collected:

• Contact details are kept indefinitely for future communication
• Analytical data is automatically managed by Matomo and Umami
• Project data is kept for as long as necessary for the execution of our services

8. Cookies and Similar Technologies

We use the following types of cookies on our website:

• Functional cookies: necessary for the functioning of the website
• Analytical cookies: from Matomo and Umami, privacy-friendly configured without sharing personal data

You can set your browser to refuse all cookies or to alert you when cookies are being sent. However, refusing cookies may affect the functionality of our website.

9. Security

We have implemented appropriate security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including:

• Encrypted connections (SSL/TLS)
• Secured servers
• Regular updates and patches
• Access controls

10. Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: you have the right to access the personal data we process about you
• Right to rectification: you have the right to have inaccurate personal data corrected
• Right to erasure: you have the right to have your personal data deleted
• Right to restriction of processing: you have the right to restrict the processing of your personal data
• Right to data portability: you have the right to receive your personal data in a structured, commonly used, and machine-readable format
• Right to object: you have the right to object to the processing of your personal data
• Right not to be subject to automated decision-making: you have the right not to be subject to a decision based solely on automated processing
• Right to withdraw consent: you have the right to withdraw your consent for the processing of your personal data

To exercise these rights, please contact us using the contact details in section 2.

11. International Data Transfers

Some of our service providers may process data outside the European Economic Area (EEA). When this is the case, we ensure that appropriate safeguards are in place to protect your personal data, such as:

• EU Standard Contractual Clauses
• Adequacy decisions by the European Commission
• Other appropriate safeguards in accordance with GDPR requirements

We only select service providers that provide adequate levels of protection in accordance with GDPR requirements.

12. Special Categories of Personal Data and Data of Minors

We do not process special categories of personal data (such as data concerning health, religion, political opinions, etc.) or data of minors. If we inadvertently receive such data, we will delete it immediately.

13. Complaints

If you have a complaint about the processing of your personal data, please contact us first using the contact details in section 2. You also have the right to lodge a complaint with the Dutch Data Protection Authority, the supervisory authority for data protection in the Netherlands:

Dutch Data Protection Authority (Autoriteit Persoonsgegevens)
P.O. Box 93374
2509 AJ THE HAGUE
www.autoriteitpersoonsgegevens.nl

14. Changes to the Privacy Statement

We may update this privacy statement from time to time. The most recent version is always available on our website. We recommend that you regularly consult this privacy statement to stay informed of any changes.

15. Contact

If you have any questions about this privacy statement or about the processing of your personal data, please contact us using the contact details in section 2.