Privacy Policy

Controller

SCRTY B.V., Belgischezoom 13, 2912 GC Nieuwerkerk aan den IJssel, the Netherlands.

For privacy enquiries, contact privacy@scrty.nl.

What data we process

• Contact details you provide when you reach out to us: name, email address, phone number and the content of your message.
• Technical data automatically recorded in server logs: IP address, browser type, pages requested and timestamp.

Purposes and legal bases

We process this data to:

• respond to your question or request and to provide our services (Art. 6(1)(b) GDPR);
• keep our website secure and available and prevent abuse (legitimate interest, Art. 6(1)(f) GDPR);
• comply with legal obligations (Art. 6(1)(c) GDPR);
• send optional communications where you have given consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.

Hosting and data residency

This website and its data are hosted exclusively within the European Union, on infrastructure we operate ourselves or with EU providers. We do not use US-based cloud providers.

Sharing with third parties

We do not sell your data. We only share data with:

• Scaleway SAS (transactional email delivery, France);
• processors that support us with hosting, all within the EU and under a data processing agreement;
• competent authorities, where we are legally required to do so.

Retention

We do not keep personal data longer than necessary. We retain correspondence for as long as needed to handle your request and any follow-up. Server logs are retained for a limited period. For data subject to a statutory retention obligation, such as our accounts, the statutory period of seven years applies.

Cookies

This website uses only essential, functional cookies. We place no tracking or advertising cookies and use no third-party analytics that follow you across websites.

Security

We protect data with encryption in transit (TLS), hardened EU infrastructure, need-to-know access and logging.

Your rights

You have the right to access, rectification, erasure, restriction, portability and objection. Send your request to privacy@scrty.nl; we respond within 30 days.

Complaints

If you disagree with how we handle your data, you may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

Processing in client engagements

Where we process personal data of or on behalf of a client as part of an advisory or service engagement, we act as a processor under a separate data processing agreement. This privacy policy concerns our own website and operations.

Changes

We may update this privacy policy. The most current version is always on this page, with the date of last change shown at the top.