Privacy statement

Bonsai Software B.V. is the data controller for the processing of personal data described in this statement.

• Bonsai Software B.V., established at Westblaak 33, 3012 KD Rotterdam.
• Registered with the Dutch Chamber of Commerce under number 95668268.
• Contactable at privacy@bonsaisoftware.nl or on +31 6 43 73 54 12.

We only process data that you give us yourself, or that is recorded automatically when you use our website:

• Contact and project forms: name, company name, email address, phone number and the content of your message.
• Booking a call: name, email address and the selected time slot.
• Email and telephone contact: the details you share with us when you get in touch.
• Job applications: the details you include in your application or CV.
• Technical data: IP address, browser type and the pages you request, recorded in server logs to keep the website secure and working properly.

We process personal data only for the purposes below, each on a legal basis set out in Article 6 of the GDPR:

• Answering your question or request and booking a call, on the basis of your request and our legitimate interest in staying in contact.
• Carrying out an agreement, or taking pre-contractual steps at your request.
• Dealing with job applications, on the basis of your request and our legitimate interest in recruitment.
• Security, preventing misuse and keeping the website working properly, on the basis of our legitimate interest.
• Meeting our legal obligations, for example around record-keeping.

We keep personal data no longer than we need it for the purposes it was collected for, or for as long as the law requires.

• Enquiries and correspondence that do not lead to an engagement: up to two years after our last contact.
• Data held within a client relationship: for the term of the agreement, and afterwards in line with our statutory retention obligations.
• Application data: up to four weeks after the process has finished, or up to one year with your consent.
• Server logs: a limited period, as a rule no longer than a few months.

We do not sell your data. We share it only with service providers who help us deliver our services, and only as far as that is necessary. We put data processing agreements in place with these parties.

• Hosting and infrastructure providers for the website and email.
• A scheduling tool used to book calls.
• Advisers and authorities, where we are legally required to do so.

We prefer to process data within the European Economic Area. Where data is transferred to a country outside it, we make sure there is an adequate level of protection, for example through the European Commission's standard contractual clauses.

Our website uses cookies that are necessary for it to work. With your consent, we also place analytics cookies to help us improve the site. You give that consent through the cookie notice, and you can change your choice at any time via 'Cookie preferences' at the bottom of every page.

We take appropriate technical and organisational measures to protect your data, including encryption over HTTPS, restricted access and the principle of least privilege. You can report a vulnerability through our security policy at /security.

Under the GDPR you have the following rights over your personal data:

• The right of access to the data we hold about you.
• The right to rectification of inaccurate or incomplete data.
• The right to erasure of your data.
• The right to restriction of processing.
• The right to object to processing based on legitimate interest.
• The right to portability of the data you have provided.

You can make a request at privacy@bonsaisoftware.nl, and we will respond within four weeks. To guard against misuse, we may ask you to confirm your identity.

If you have a complaint about how we handle your data, please come to us first. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

We may update this privacy statement from time to time. The current version is always on this page, with the version date shown at the bottom.

Have a question about this statement or about your data? Email privacy@bonsaisoftware.nl or info@bonsaisoftware.nl, or call +31 6 43 73 54 12.