Privacy Policy

Who we are

Xyvo Technologies B.V. (“we” or “us”) is responsible for the processing of personal data through the website xyvotech.com (the “Website”). We are registered with the Dutch Chamber of Commerce (KVK) under number 89332369, and our address is Sloterweg 796, 1066 CN Amsterdam, the Netherlands.

This policy only covers the Website. Our brands have their own privacy policies on their own websites.

Questions about this policy or your data? E-mail us at hello@xyvotech.com.

What data we collect

We keep this to a minimum. The Website uses no advertising cookies, and we do not build profiles of visitors. We process the following personal data:

• Contact form: your name, e-mail address and message, and, if you fill them in, your company and the topic of your message.
• E-mail: anything you send us by e-mail, including CVs, portfolios and other application documents.
• Technical data: when you visit the Website, your browser sends technical data such as your IP address, browser type and the page you request. Our hosting provider needs this to deliver the Website and protect it against abuse.
• Usage data: which pages you view and what you click on, the website you came from, your browser and device, and your approximate location. We collect this with PostHog, which places a cookie on your device (see Cookies). PostHog uses your IP address to estimate your location.

Why we use it

• To answer your message and follow up on it. Our legal basis is our legitimate interest in responding to people who contact us, or taking steps at your request before entering into an agreement.
• To assess your application, if you send us one. Our legal basis is taking steps at your request before entering into an employment agreement, and our legitimate interest in finding the right people.
• To deliver the Website and keep it secure. Our legal basis is our legitimate interest in a working and safe website.
• To understand how the Website is used and improve it. Our legal basis is our legitimate interest in knowing which pages people visit and what works.

We do not sell your personal data and do not use it for automated decision-making.

Cookies

The Website sets one functional cookie, i18n_redirected, which remembers the language you chose so we do not redirect you on your next visit. It only holds that choice and expires after one year. Because it is needed for a function you ask for, it does not require your consent.

Our hosting provider Cloudflare may set strictly necessary security cookies to protect the Website against bots and attacks. Our analytics, PostHog, sets a cookie whose name starts with ph_ and keeps the same data in your browser's local storage. It holds a random identifier so we can recognise a returning visit, and the cookie expires after one year.

Who we share it with

We only share personal data with service providers that help us run the Website, and only as far as they need it:

• Cloudflare, Inc. hosts the Website, delivers its images and videos, and protects it against attacks. Videos on the project pages are loaded from Cloudflare Stream, which connects your browser to Cloudflare.
• Slack Technologies, LLC: messages you send through the contact form reach our team through Slack.
• PostHog, Inc. processes usage data for our statistics and stores it on servers in the European Union.

All three act as our processors under a data processing agreement. We may also share data where the law requires us to, for example at the request of a competent authority.

Transfers outside the EEA

Cloudflare, Slack and PostHog are based in the United States, so your data may be processed outside the European Economic Area, even where it is stored in the EU. These transfers rely on the EU-U.S. Data Privacy Framework where the provider is certified under it, and otherwise on the European Commission's standard contractual clauses.

How long we keep it

• Contact messages: as long as needed to handle your question and any follow-up, unless the law requires us to keep them longer.
• Applications: up to four weeks after the application process ends, or up to one year if you give us permission to keep your details for future roles.
• Technical data: our hosting provider keeps it briefly to deliver and secure the Website. We do not store it ourselves.
• Usage data: as long as it helps us see how use of the Website changes over time, after which we delete it.

Security

We take appropriate technical and organisational measures to protect your personal data against loss and unauthorised access.

Your rights

You have the right to access your personal data, have it corrected or deleted, restrict or object to its processing, and receive it in a portable format. Where we rely on your consent, you can withdraw it at any time.

To use any of these rights, e-mail us at hello@xyvotech.com. We respond within one month.

If you have a complaint about how we handle your data, please contact us first. You also have the right to file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Children

The Website is not aimed at children under 16, and we do not knowingly collect their personal data.

Changes

We may update this policy from time to time. The current version is always on this page, with the date it was last updated.