Privacy statement
This privacy statement explains which personal data AVENDOX processes when you visit this website or contact us, why we do so and which rights you have. We process as little data as possible and only use it for the purpose for which you provide it.
Who is responsible
AVENDOX is the controller for the processing described in this statement. You can reach us at max@avendox.io or +31 6 18435718. AVENDOX · Frans Erensstraat 40, 5044 PM Tilburg · Chamber of Commerce 42178130 · VAT NL004861986B63.
Which data we process and why
Contact via the form, email or phone. We process your name, email address and, if provided, your phone number and organisation, and the content of your question. We use this data to answer your question and to discuss a possible collaboration with you. The legal basis is taking steps at your request prior to a possible agreement, and our legitimate interest in answering questions (Article 6(1)(b) and (f) GDPR).
What you enter in the contact form is stored in our own customer system (CRM), so that we can follow up on your question. To prevent abuse we keep a one-way hashed version of your IP address, not the address itself.
Business contacts. We sometimes approach organisations ourselves, using business contact details they make public (for example on their website). We do so on the basis of our legitimate interest in introducing AVENDOX to businesses (Article 6(1)(f) GDPR). We only use name, role, organisation and business contact details, tell you at first contact where we found them, and stop immediately if you tell us you do not want to be contacted.
Help from AI. When preparing our work, such as research and draft messages, we use AI services. We share as little personal data as possible with them. These services do not use your data to train their models. No decisions about you are made by AI alone; a person reviews everything that goes out.
Website visits. The server this website runs on processes technical data such as your IP address and the time of your visit, because this is necessary to display and secure the website (legitimate interest). We do not use this data to track you or build a profile of you.
Cookies and storage in your browser
This website does not use analytics, tracking or advertising cookies. In your browser (via localStorage) we only store your preferences for language, sound, motion and plain language, and which film quality your device plays smoothly (for 14 days), so the website remembers them on your next visit. Avi, the assistant on this website, runs entirely in your browser: your questions are not stored and not sent to us or anyone else. Only if you ask Avi to put your question in the contact form does your browser keep it temporarily (sessionStorage) until the form opens. This is functional storage that does not require consent. You can delete this data at any time through your browser settings.
Fonts, images and video are loaded from our own website and not through third parties.
Visitor statistics. We measure anonymously how the website is used, with Plausible on our own server in the EU. No cookies are set, no personal data is stored and no data is shared with others.
How long we keep data
We keep contact details for as long as necessary to handle your question and any collaboration. Requests and contacts without an ongoing collaboration are deleted automatically two years after the last contact. Data that forms part of our business records, such as quotes and invoices, is kept for as long as the law requires; for tax records in the Netherlands that is seven years.
With whom we share data
We do not sell your data. We only share it with service providers we need to deliver our services, and only under a data processing agreement with appropriate security arrangements: our hosting and database provider Hetzner (Germany), our email service Zoho (data centre in the EU) and our AI service Anthropic (United States). We also share data when required by law.
If a service provider processes data outside the European Economic Area, we ensure the safeguards required by the GDPR, such as an adequacy decision or the European Commission’s standard contractual clauses.
Security
We take appropriate technical and organisational measures to protect your data against loss and unauthorised use, such as a secure connection (HTTPS) and limited access to data.
Your rights
You have the right to access, rectify or erase your data, to restrict processing, to object to processing (including to being approached for business) and to data portability. Send your request to max@avendox.io; we respond within one month and, on request, send you an overview of all the data we hold about you.
If you are not satisfied with how we handle your data, please let us know. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).
Changes
We update this privacy statement when our website or way of working changes. The date of the latest change is shown at the top. Please also read our terms and conditions.