Privacy Policy

1. Data Controller

Zybur is the data controller responsible for processing your personal data. If you have questions about this privacy policy or your personal data, you can contact us at:

• Company: Zybur
• Location: Amsterdam, Netherlands
• Email: info@zybur.nl

2. What Data We Collect

We collect and process the following categories of personal data:

Contact Form Submissions

When you submit our contact form, we collect:

• Your name
• Email address
• Company name
• Your message

Analytics & Cookies

With your consent, we use analytics cookies to understand how visitors interact with our website. This may include:

• Pages visited and time spent on each page
• Referring website or source
• Browser type and version
• Device type and screen resolution

Technical Data

When you visit our website, our hosting infrastructure automatically collects certain technical data:

• IP address
• Browser type and version
• Operating system
• Date and time of access
• Requested URL

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under the GDPR:

• Consent (Art. 6(1)(a) GDPR) — for placing analytics and non-essential cookies on your device. You can withdraw your consent at any time.
• Contract Performance (Art. 6(1)(b) GDPR) — for processing contact form submissions when you request information about our services or initiate a business relationship.
• Legitimate Interest (Art. 6(1)(f) GDPR) — for collecting technical data necessary to ensure the security, availability, and proper functioning of our website.

4. Data Processors

We share your personal data with the following third-party processors who act on our behalf:

• Formspree — processes contact form submissions. Formspree acts as a data processor and handles your form data in accordance with their privacy policy.
• Microsoft Azure — hosts our website via Azure Static Web Apps. Server logs containing technical data are processed within the Azure infrastructure.

We have appropriate data processing agreements in place with each processor. We do not sell your personal data to any third party.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Contact form data — retained for up to 12 months after your inquiry has been resolved, unless a longer retention period is required for an ongoing business relationship.
• Analytics data — retained for up to 26 months, after which it is automatically deleted or anonymised.
• Technical server logs — retained for up to 90 days for security and diagnostic purposes.

6. Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

• Right of Access — you can request a copy of the personal data we hold about you.
• Right to Rectification — you can request correction of inaccurate or incomplete personal data.
• Right to Erasure — you can request deletion of your personal data, subject to legal obligations.
• Right to Data Portability — you can request your data in a structured, commonly used, machine-readable format.
• Right to Object — you can object to processing based on legitimate interest.
• Right to Restrict Processing — you can request that we limit the processing of your data in certain circumstances.
• Right to Withdraw Consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@zybur.nl. We will respond to your request within 30 days.

7. Cookies

Our website uses cookies to enhance your browsing experience. We use the following types of cookies:

• Essential Cookies — necessary for the website to function properly. These do not require consent.
• Analytics Cookies — used to understand how visitors interact with our website. These are only placed with your explicit consent.

You can manage your cookie preferences at any time through the cookie consent banner on our website. You can also configure your browser to block or delete cookies, though this may affect website functionality.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our website is served over HTTPS, and we regularly review our security practices.

9. International Data Transfers

Some of our data processors may process data outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your personal data.

10. Supervisory Authority

If you believe that your personal data has been processed in violation of the GDPR, you have the right to lodge a complaint with the Dutch Data Protection Authority:

• Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl)

11. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable legislation. We will post the updated version on this page with a revised “last updated” date. We encourage you to review this policy periodically.

12. Contact

If you have any questions about this privacy policy or how we handle your personal data, please contact us at info@zybur.nl.