Legal
Privacy Policy
How Afenta handles personal data when you visit the website, contact us, become a client, or use invoice and payment flows.
Last updated:
1. Controller
Afenta, based in Eindhoven, The Netherlands, is responsible for the processing of personal data described in this policy.
For privacy questions or requests, contact us at info@afenta.com.
2. Personal data we process
We only process data that is relevant to running the website, responding to enquiries, delivering services, and administering client relationships.
- Contact data, such as name, company name, email address, phone number, and message content when you contact us by email, WhatsApp, phone, or another channel.
- Business and project data needed to prepare proposals, deliver services, communicate about work, and manage support.
- Billing data, such as invoice details, payment status, VAT or company details, and payment references when you are a client.
- Technical data, such as IP address, browser, device data, logs, security events, and basic usage information needed to keep the website secure and reliable.
- If you consent to analytics, technical and usage data such as online identifiers, browser and device information, pages viewed, and selected interaction events. We do not intentionally send form contents to analytics.
3. Why we process data
We process personal data only where we have a lawful basis under the GDPR.
- To respond to enquiries and communicate with you, based on your request or our legitimate interest in business communication.
- To prepare proposals, perform agreements, deliver services, and manage client work.
- To create invoices, process payments, keep financial records, and comply with legal and tax obligations.
- To secure, maintain, and improve the website and related systems.
- To send service-related messages, such as invoice, payment, or project updates.
- To measure visits and selected website interactions and improve the website, only where you have consented to analytics.
5. International transfers
Some service providers may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards, such as adequacy decisions, standard contractual clauses, or equivalent protection required by applicable law.
6. Retention
We keep personal data only as long as needed for the purpose for which it was collected, unless a longer retention period is required by law.
- Enquiries are kept for as long as needed to follow up and maintain business context.
- Client, contract, and project records are kept for the duration of the relationship and a reasonable period afterwards.
- Financial and tax records are retained for the statutory retention periods that apply in The Netherlands.
- Security logs are retained for a limited period unless needed to investigate abuse, fraud, or security incidents.
- Google Analytics user-level and event data is retained for 14 months, matching the current Analytics property setting. Cookie lifetimes are described in our Cookie Policy.
7. Security
We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.
No online system can be guaranteed to be completely secure, but we limit access to personal data and use providers with appropriate security measures.
8. Your rights
Depending on the situation, you may have the right to access, correct, delete, restrict, transfer, or object to the processing of your personal data. If processing is based on consent, you may withdraw that consent at any time.
You can send a request to info@afenta.com. We may ask for information to verify your identity. You also have the right to lodge a complaint with the Dutch Data Protection Authority.
10. Changes
We may update this Privacy Policy when our website, services, vendors, or legal obligations change. The date above shows the latest version.