Legal
Privacy policy
This policy describes which personal data Hybric processes when you visit this website or get in touch, why we do so, how long we keep it, and the rights you have.
Who we are
Hybric B.V. is a software company in the Netherlands and is the data controller for the personal data collected through this website. Questions about this policy or about your data can be sent to the address below.
What data we process
Through the contact form we process only the details you enter yourself:
- Your name
- Your company, if you give one
- Your email address
- Your message, if you write one
Technical data
We run the server that delivers this website ourselves. It processes technical data such as your IP address and the time of a request, because that is needed to deliver the site, investigate faults and prevent abuse of the contact form. It keeps no access logs, it holds this data in memory only and never writes it to disk, and we do not use it to track visitors.
What we use it for, and on what basis
We use your details solely to answer your question and, where there is reason to, to make a proposal. We do not use them for newsletters, profiling or automated decision-making, and we do not sell or rent them.
The legal basis is taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR). Where that does not apply, we rely on our legitimate interest in responding to a business enquiry (Article 6(1)(f) GDPR). Website statistics are processed only with your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.
How long we keep it
Messages sent through the contact form are kept for at most two years, so that we can find an ongoing conversation again. If your message leads to an engagement, the retention periods in that contract apply, along with the statutory seven-year record-keeping obligation.
If you would like your message deleted sooner, we will do so on request.
Your IP address is only remembered when you use the contact form, and never from simply reading a page: for ten minutes, so that the same sender cannot submit over and over, and for a day once a message has actually been sent, so that nobody can take up the inbox. It is held in memory on the server, so a restart forgets it.
Who else processes your data
We use a small number of service providers who process data on our behalf. A data processing agreement is in place with each of them.
- Hetzner Online GmbH, Germany: hosting of the server that delivers this website
- Resend, United States: delivery of the email the contact form sends
- TransIP B.V., the Netherlands: our mailbox, which receives the messages the contact form sends
- PostHog, European Union region: website statistics, only after you consent
Website statistics
We measure website usage with PostHog, on its European hosting. Nothing is loaded and nothing is measured until you allow statistics in the banner, and you can withdraw that consent at any time from the cookie policy. What we collect is limited to which pages are visited, how long they stay open and how far down they are read, which website or campaign link brought you here, roughly where from, and which kind of device: never data you enter into the form.
Cookies
This website places no cookies until you allow statistics. Which cookies are involved, what they do and how long they last is set out in the cookie policy.
Transfers outside the European Economic Area
Hosting, our mailbox and website statistics stay inside the European Economic Area. The service that delivers the contact form’s email is established in the United States and may process data outside the EEA. Those transfers take place under the European Commission Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.
Security
The website is served exclusively over an encrypted connection, and form submissions are sent encrypted. Access to the messages we receive is limited to the people answering your question.
Your rights
You have the right to access your data, to have it corrected, and to have it erased. You can also ask us to restrict processing, object to processing, and receive your data in a common format in order to transfer it.
Send a request to the email address above. We respond within one month. To avoid handing data to the wrong person, we may ask you to substantiate your request.
Complaints and changes
If you disagree with how we handle your data, tell us first. It is usually resolved quickly. You also always have the right to lodge a complaint with the Autoriteit Persoonsgegevens, the Dutch supervisory authority.
If the way we process data changes, we will update this policy. The date at the top shows when that last happened.