[Privacy Policy]
> What we collect, why, and what you can do about it
> Controller
Amsterdam Technologies B.V. is the controller for the processing described here.
This policy covers amsterdam-technologies.com and the product websites we operate, including netcap.io, fastserve.nl, fasttap.nl, time-master.app and artist-connect.pro. Our products' hosted applications process data on behalf of the customers who use them; where we act as a processor rather than a controller, the agreement with that customer governs, not this policy.
> Server Log Files
Our web servers record the following for each request, which your browser transmits automatically:
- IP address
- Browser type and version
- Operating system
- Referrer URL
- Time of the request
- Requested URL and response status
An IP address is personal data, and combined with the other fields above a request can in principle be linked to an individual. We process these logs on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in operating the service securely and diagnosing faults. They are not used for advertising or profiling, and are not combined with other data sources for that purpose.
Retention: server and reverse-proxy logs are kept for 30 days, then deleted.
> Whitepaper Downloads
Whitepapers are downloadable without giving us any personal data. We do not require an email address to access them, and the optional newsletter signup next to them is genuinely optional.
> Contact Forms
If you contact us through a form or by email, we process the details you send in order to answer you and handle any follow-up. The legal basis is our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR), or steps taken at your request prior to entering a contract (Art. 6(1)(b) GDPR) where that applies. We keep correspondence for as long as needed to deal with the matter and to meet our legal obligations.
> Analytics
We run our own Shynet instance at analytics.dreadl0ck.net to understand how our sites are used. It is self-hosted on our own infrastructure; no analytics data is sent to third-party advertising networks.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in understanding aggregate usage of our sites. Shynet is configured to respect the Do Not Track browser signal. If you set DNT, you are not counted.
> Purchases, Licences and Invoices
If you buy a product or licence, our payments platform processes the data needed to complete the order: your billing details, the items purchased, and payment status. Card details are handled by the payment provider; we do not receive or store full card numbers.
Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and, for invoices, our legal obligation (Art. 6(1)(c) GDPR).
Retention: Dutch tax law requires invoices and the underlying administration to be kept for 7 years. This is also why we cannot delete an invoice on request, even though you may ask us to erase other data.
> Cookies
Our marketing sites use no advertising or tracking cookies. Where a cookie is strictly necessary — for example to keep you signed in to an application — it is set only for that purpose. If we ever introduce cookies that require consent, we will ask for it before setting them and update this policy.
> Recipients and Processors
We keep the number of parties who touch your data small. The current recipients are:
| Recipient | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Server hosting and backups | Germany (EU) |
| Amsterdam Technologies mail service (self-hosted) | Sending and storing email, newsletter lists | Germany (EU) |
| Payment provider | Processing purchases and issuing invoices | EU |
| Anthropic | Generating our own marketing documents. No customer or subscriber personal data is sent | United States |
We do not sell personal data. Our hosting, mail and analytics all run on our own infrastructure inside the EU.
> Your Rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15)
- rectify inaccurate data (Art. 16)
- erase your data (Art. 17), subject to retention we are legally required to observe, such as the 7-year invoice rule above
- restrict processing (Art. 18)
- data portability (Art. 20)
- object to processing based on legitimate interest (Art. 21), including our analytics and log processing
- withdraw consent at any time where processing is based on consent (Art. 7(3)), without affecting processing carried out before withdrawal
To exercise any of these, email support@amsterdam-technologies.com. We respond within one month.
You also have the right to lodge a complaint with the Dutch supervisory authority:
> Changes to This Policy
We update this policy when our processing changes. The date below shows when it was last revised. Where a change materially affects processing based on your consent, we will ask for consent again rather than rely on the old one.
Company details and other legal information are on our imprint page.