Privacy Policy
Last updated: January 2025
1. Introduction
Anonify B.V., registered at De Werf 4a, 3632AE Loenen a/d Vecht, The Netherlands ('we', 'us', or 'our'), respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch privacy legislation.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website (anonify.nl), use our services, or interact with us in any way.
By using our website or services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this policy, please do not use our website or services.
2. Data Controller
Anonify B.V. is the data controller responsible for processing your personal data. Our contact details are:
Anonify B.V., De Werf 4a, 3632AE Loenen a/d Vecht, The Netherlands
Email: info@anonify.nl
Phone: +316 22 73 16 98
3. Information We Collect
We collect different types of personal data depending on how you interact with us:
Contact Information: When you fill out contact forms, request a demo, or subscribe to our newsletter, we collect your name, email address, company name, phone number, and any message content you provide.
Account Information: If you create an account or use our platform, we collect login credentials, usage data, billing information, and documents you upload for processing.
Technical Information: We automatically collect certain technical information including IP address, browser type and version, device information, operating system, referral source, pages visited, time and date of visits, and other usage statistics.
Cookies and Tracking: We use cookies and similar tracking technologies. For detailed information, please see our Cookie Policy.
Communication Records: We keep records of communications between you and our team, including emails, support tickets, and phone call logs.
4. Legal Basis for Processing
We process your personal data based on the following legal grounds under GDPR:
Consent: When you provide explicit consent, for example, for marketing communications or non-essential cookies.
Contract Performance: To fulfill our contractual obligations when you use our services or request a demo.
Legal Obligation: To comply with legal requirements, such as tax obligations or responding to legal requests.
Legitimate Interests: For our legitimate business interests, such as improving our services, preventing fraud, ensuring security, and analyzing website usage. We always balance our interests against your privacy rights.
5. How We Use Your Information
We use the collected information for the following purposes:
Service Delivery: To provide, maintain, and improve our AI anonymization services, process your requests, and manage your account.
Communication: To respond to your inquiries, provide customer support, send service-related notifications, and (with consent) send marketing communications.
Business Operations: To manage our business operations, process payments, prevent fraud, ensure security, and comply with legal obligations.
Analytics and Improvement: To analyze website usage, understand user behavior, improve our services, and develop new features.
Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests.
We do not sell your personal data to third parties. We may share data with trusted service providers who assist us in operating our business, subject to strict confidentiality agreements.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
Account Data: Retained for the duration of your account plus 7 years for legal and tax purposes.
Marketing Data: Retained until you withdraw consent or unsubscribe from communications.
Website Analytics: Retained for up to 26 months.
Legal Documents: Retained as required by Dutch law, typically 7 years for financial records.
After the retention period, we securely delete or anonymize your personal data.
7. Data Security
We implement comprehensive technical and organizational measures to protect your personal data:
Encryption: All data in transit is encrypted using TLS/SSL protocols. Data at rest is encrypted using industry-standard encryption.
Access Controls: We use role-based access controls and limit access to personal data to authorized personnel only.
Secure Infrastructure: Our services are hosted in ISO 27001 certified European data centers with physical security measures.
Regular Security Audits: We conduct regular security assessments and penetration testing.
Employee Training: All employees receive privacy and security training and are bound by confidentiality agreements.
Incident Response: We have procedures in place to detect, report, and investigate personal data breaches in accordance with GDPR requirements.
8. Data Transfers
Your personal data is primarily processed and stored within the European Economic Area (EEA) in European data centers.
If we need to transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or adequacy decisions by the European Commission.
We do not transfer personal data to countries without adequate data protection laws unless we have implemented appropriate safeguards.
9. Your Rights Under GDPR
You have the following rights regarding your personal data:
Right of Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can request correction of inaccurate or incomplete data.
Right to Erasure ('Right to be Forgotten'): You can request deletion of your personal data in certain circumstances.
Right to Restrict Processing: You can request that we limit how we use your data.
Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
Right to Object: You can object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent: If processing is based on consent, you can withdraw it at any time.
To exercise these rights, please contact us at info@anonify.nl. We will respond within one month. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
10. Third-Party Services
Our website and services may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.
We use the following categories of third-party services:
Analytics Services: To analyze website usage and improve our services.
Hosting Services: To host our website and platform in secure data centers.
Payment Processors: To process payments securely.
Email Services: To send transactional and marketing emails.
All third-party service providers are contractually bound to protect your data and use it only for specified purposes.
11. Children's Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately, and we will take steps to delete such information.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website with a new 'Last updated' date.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
Contact Us
For questions about this Privacy Policy, please contact us at info@anonify.nl or write to: Anonify B.V., De Werf 4a, 3632AE Loenen a/d Vecht, The Netherlands