Privacy policy
This policy explains which personal data Ansätze collects, why, how long we keep it, who else sees it and what you can ask of us. It applies to visitors of ansatze.io, to people who contact us, and to the people we work with at our clients, suppliers and partners. Last updated 3 October 2026.
1. Who we are
Ansätze is the data controller for the personal data described in this policy. That means we decide why and how it is used, and we are responsible for it.
Ansätze [legal form, e.g. B.V. or v.o.f.][street and number], [postcode] Groningen, the Netherlands
Chamber of Commerce (KvK) number [number]
Email info@ansatze.io
We have not appointed a data protection officer, as the law does not require one for a company of our size and type of work. For any question about your data, write to info@ansatze.io.
2. What we collect and why
We only collect what we need for a clear purpose, and each use rests on one of the legal grounds in Article 6 of the General Data Protection Regulation (GDPR).
| When | What we collect | Why | Legal ground | How long we keep it |
|---|---|---|---|---|
| You visit ansatze.io | IP address, date and time, the page asked for, browser and device type | To deliver the site and protect it against abuse | Legitimate interest (6(1)(f)) | A few days, in our hosting provider's logs |
| You browse ansatze.io (visit statistics) | Which page and which part of it you view and for how long; mouse movement and clicks, as positions on the page; the site that linked to us; your country, worked out from your network location; browser, device type, window size and language. Nothing you type is read, and your IP address is not stored. A random code joins up the reports from one page view, and nothing links one page view to another | To see which parts of the site are read and used, so we can improve it | Legitimate interest (6(1)(f)) | Mouse movement and clicks: 90 days. The rest: 13 months |
| You use the contact form or email us | Name, email address, the topics you choose, your message and anything you tell us in it | To answer you and take the steps you ask for before any agreement, such as a call or a proposal | Steps before a contract (6(1)(b)), or our legitimate interest in answering questions (6(1)(f)) | Up to 12 months after our last contact, unless it leads to work together |
| You or your company become a client | Name, job title, work email and phone number, correspondence, meeting notes, contracts and invoices | To agree on and carry out the work, invoice it and stay in touch about it | Performing the contract (6(1)(b)) and our legal obligations (6(1)(c)) | For the length of the work and 2 years after. Invoices and accounting records: 7 years, as Dutch tax law requires |
| You work for a supplier or partner, such as a hardware partner | Name, job title, work contact details and correspondence | To arrange and manage the collaboration | Performing the contract (6(1)(b)) or legitimate interest (6(1)(f)) | For the length of the collaboration and 2 years after. Financial records: 7 years |
| You follow or message us on LinkedIn | Your public profile and what you send us | To reply and keep in touch | Legitimate interest (6(1)(f)) | As long as the conversation is relevant. LinkedIn also processes this data under its own policy |
| You follow or message us on X (@ansatzeio) | Your public profile and what you send us | To reply and keep in touch | Legitimate interest (6(1)(f)) | As long as the conversation is relevant. X also processes this data under its own policy |
Please leave anything confidential out of your first message. We sign a non-disclosure agreement before we look at your business in more detail.
We do not sell personal data, use it for advertising, or make decisions about you by purely automated means, including profiling. We will only send you news or marketing if you have asked for it, and you can stop it at any time.
3. Data in client projects
In a project we may work with documents and systems that contain personal data, such as invoices, orders or customer records. For that data our client is the controller and Ansätze acts as its processor. We handle it only on the client's written instructions, under a non-disclosure agreement and a data processing agreement, and only as far as the project needs. When the project ends we return or delete it, as agreed with the client. If your data reaches us this way, the client's own privacy policy applies, and you can also contact us.
4. Cookies and tracking
This website sets no cookies. To improve it, we keep visit statistics of our own, described in the table above. They are stored by Cloudflare on our behalf, are never shared or sold, and cannot be used to identify you.
Your browser is not counted if it sends a Global Privacy Control or Do Not Track signal. You can also turn the statistics off for your browser by opening ansatze.io/?notrack, which stores one setting on your device to remember the choice; ansatze.io/?track turns them back on.
The site uses no advertising pixels or social media trackers, and its fonts are served from our own website, so no outside service learns that you visited.
5. Who we share it with
We share personal data only when it is needed for the purposes above. These service providers process it on our behalf, under a data processing agreement, and may not use it for anything else:
- Cloudflare hosts the website, protects it against attacks and stores our visit statistics.
- Resend delivers contact form messages to our inbox and keeps a copy for 30 days.
- Google Workspace provides our email, calendar and document storage.
- [Accounting or invoicing software, e.g. Moneybird or Exact] keeps our financial records.
We also share data, only where needed, with our accountant for bookkeeping and tax purposes, with partners working on your project if you have agreed to it, and with authorities when the law requires us to.
6. Transfers outside the EEA
Cloudflare, Resend and Google are based in the United States, so your data may be processed outside the European Economic Area. These transfers are protected by the EU-US Data Privacy Framework, under which the European Commission has recognised an adequate level of protection, and by the Commission's standard contractual clauses.
7. How we protect it
We take appropriate technical and organisational measures to protect personal data against loss and unauthorised access. These include encrypted connections (HTTPS) on the website, two-factor authentication on our accounts, access limited to the people who need it, and confidentiality agreements for client work. If a data breach happens that puts your rights at risk, we will report it to the Dutch Data Protection Authority and, where required, inform you.
8. Your rights
Under the GDPR you can ask us to:
- show you the personal data we hold about you and how we use it;
- correct data that is wrong or incomplete;
- delete your data, unless we must keep it by law;
- limit how we use it while a question or complaint is being looked at;
- send the data you gave us to you or to another organisation, in a common format;
- stop using it where we rely on our legitimate interest, unless we have compelling reasons to continue;
- withdraw your consent at any time, where we asked for it, without affecting earlier use.
Email info@ansatze.io with your request. It is free, and we will answer within one month. If we need to confirm who you are before answering, we will ask, and we will never ask for more than we need for that.
9. Complaints
If you are unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or to the authority in the EU country where you live or work.
10. Children, changes and contact
Children
Our services are meant for businesses. We do not knowingly collect data from anyone under 16. If you think we have, contact us and we will delete it.
Changes to this policy
When the way we handle data changes, we update this page and the date at the top. If a change affects you significantly, and we have your contact details, we will let you know.
Contact
Questions about this policy or your data: info@ansatze.io.