Privacy policy

DnA IT Labs, Stijging 8, 5629 TZ Eindhoven, the Netherlands, registered with the Dutch Chamber of Commerce (KVK) under number 76432017, is the controller for the personal data described here. Questions about privacy can be sent to contact@dnaitlabs.com or by post to the address above.

When you use the contact form or email us: your name, work email address and the content of your message, plus anything else you choose to share.

When you visit the site: our hosting provider automatically records technical data such as your IP address, browser type, the page requested and the time of the request. These server logs are used to deliver the site securely and are not used to profile you.

We do not use analytics, advertising or tracking cookies. See our cookie policy.

• Answering your enquiry and preparing a proposal: taking steps at your request before entering into a contract (GDPR art. 6(1)(b)), or our legitimate interest in responding to business enquiries (art. 6(1)(f)).
• Delivering a contracted service and invoicing: performance of a contract (art. 6(1)(b)) and legal obligations such as tax record-keeping (art. 6(1)(c)).
• Keeping the website secure and available: our legitimate interest (art. 6(1)(f)).

We do not use your data for automated decision-making or profiling, we do not send marketing emails without your permission, and we do not sell or rent personal data. Providing your details is voluntary, but without an email address we cannot reply to your enquiry.

We do not sell personal data. We only share it with service providers who process it on our behalf:

• Web3Forms, which forwards contact-form submissions to our inbox.
• Vercel, which hosts this website and keeps the server logs described above.
• Our email provider, which stores the correspondence.

Some of these providers may process data outside the European Economic Area. Where that happens, the transfer is covered by appropriate safeguards such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. We may also disclose data where the law requires it.

Enquiries that do not lead to an engagement are deleted within two years of our last contact. Client and invoicing records are kept for seven years, as Dutch tax law requires. Hosting logs are kept only for the short period the hosting provider needs for security and operations.

The site is served only over HTTPS, and we limit access to personal data to the people who need it to answer you or deliver our services.

You have the right to access, correct or delete your personal data, to restrict or object to its processing, and to receive it in a portable format. Where we rely on consent, you may withdraw it at any time.

To exercise these rights, email contact@dnaitlabs.com. We respond within one month. If you are unhappy with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

We may update this policy when our services or the law change. The date at the top of this page shows the latest revision.