Privacy Policy

1. Who we are

Centropic is a sole proprietorship (eenmanszaak) in the Netherlands. We are the controller of the personal data we process as described in this policy.

Contact: info@centropic.nl
KVK: 62598120 · BTW: NL002296189B28

2. What data we collect and why

We process personal data only when necessary for our services or to comply with the law. We may process:

• Contact and identity data (name, email, phone, company name) — to communicate with you, provide consulting or other services, and perform the contract.
• Correspondence and project data — content of emails, meetings, and project-related information you share with us, to deliver our work and keep records.
• Website and technical data — if you use our website, we may collect IP address, browser type, and usage data via analytics (e.g. Vercel Analytics) to improve the site; this may be anonymised where possible.

We do not sell your personal data. We do not use your data for automated decision-making or profiling.

3. Legal basis (AVG / GDPR)

We process personal data on the following bases:

• Performance of a contract — to deliver the services you have agreed with us.
• Legitimate interests — to run our business, communicate with (potential) clients, and improve our website, where this does not override your interests.
• Legal obligation — e.g. for tax and administrative records.
• Consent — where we have asked for your consent (e.g. for a specific use of data); you may withdraw consent at any time.

4. How long we keep data

We keep personal data only as long as necessary for the purposes above. In general: contact and project data for the duration of our relationship and for a reasonable period thereafter (e.g. 7 years for administrative and tax purposes where required by Dutch law). Website/analytics data according to the retention settings of the tools we use. After that, we delete or anonymise the data.

5. Who we share data with

We may share data with:

• Service providers that help us run our business (e.g. hosting, email, analytics), who act as processors and are bound by contract to protect your data.
• Authorities when required by law.

We do not transfer your data outside the European Economic Area unless we use a provider that offers adequate safeguards (e.g. standard contractual clauses approved by the European Commission).

6. Your rights (AVG / GDPR)

Under the General Data Protection Regulation (AVG), you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data in certain situations.
• Restriction — ask us to restrict processing in certain situations.
• Data portability — receive your data in a structured, machine-readable format where applicable.
• Object — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent.

To exercise these rights, contact us at info@centropic.nl. You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens.

7. Security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, and unauthorised access, in line with the risks and the nature of the data.

8. Changes

We may update this privacy policy from time to time. The "Last updated" date at the top indicates when it was last revised. We encourage you to review this page periodically. Material changes may be communicated by email or a notice on our website where appropriate.

9. Contact

For questions about this privacy policy or our use of your data: info@centropic.nl.