Skip to content
Qantara
Qantara
Book an introduction

Privacy policy

Privacy policy

What personal data Qantara processes, why, for how long, and how to exercise your GDPR rights.

This policy applies to qantara.digital and to contact with Qantara through the contact form, email or a conversation. We process as little personal data as we can and never sell it.

Who is responsible

Qantara is the controller for the personal data in this policy. Send privacy questions and requests to privacy@qantara.digital.

What data we process

  • Contact form: your name, email address, company name (if you enter it), the topic you choose, your message and the page you send the form from.
  • Email, conversations and projects: what you share with us yourself.
  • Web server logs: IP address, time, requested page and browser type. We need these to keep the website secure and available.
  • Statistics: how the website is used, without us storing your IP address. See Website statistics.
  • Answering your question and preparing an assignment: steps before a contract (Article 6(1)(b) GDPR).
  • Doing the agreed work: performance of the contract (Article 6(1)(b) GDPR).
  • Keeping the website secure and preventing abuse: our legitimate interest (Article 6(1)(f) GDPR).
  • Knowing which pages work: our legitimate interest (Article 6(1)(f) GDPR).
  • Accounting and tax: a legal obligation (Article 6(1)(c) GDPR).

We do not send you a newsletter and do not add you to a mailing list.

Website statistics

We measure how qantara.digital is used with Umami. Umami runs on our own server in the EU (Czechia). Your browser only talks to qantara.digital. No other company receives this data.

We count which pages you view, which website or campaign link brought you here, your browser, operating system, device type and screen size, your browser language and your country, region and city. We also count a few actions: a sent contact form, a click on a main button and a click to another website (the domain name only). We never measure what you type. Of the page address we keep only the path and the campaign parameters (utm_*), and of a referring website only its domain.

We do not store your IP address. The server only uses it during your visit, to determine your country, region and city and to count unique visitors. For that count it makes a one-way code (hash) from your IP address, your browser details, the date and a secret key. That code changes every day. So we cannot follow you from one day to the next, nor on other websites. We do not build a profile.

We set no cookies for this and read nothing from your browser to recognise you. We share the statistics with no one. That is why we do not ask for consent: these are analytics with little impact on your privacy (Article 11.7a of the Dutch Telecommunications Act). The legal basis is our legitimate interest: knowing which pages work and what can be better (Article 6(1)(f) GDPR).

We keep the statistics for 13 months. After that we delete them.

Don’t want to be counted? Turn on Do Not Track in your browser, or use Don’t count me in statistics at the bottom of this page. That choice is stored in your own browser only.

Cookies and storage in your browser

  • Language: the cookies NEXT_LOCALE and qantara-locale remember which language you view the site in.
  • Campaign link: if you arrive through a link with campaign data (UTM parameters), your browser stores it together with the first page and the referring website (qantara_attribution). It stays in your browser; we do not send it with the form.
  • Not counted: if you choose this, your browser stores that choice (umami.disabled).

We use no cookies for statistics or advertising. There are no trackers from Google, Meta, LinkedIn or anyone else on this website. To erase stored data, delete the site data for qantara.digital in your browser.

How long we keep data

  • Contact messages: as long as needed to handle your question, and after that for 12 months at most.
  • Project and client data: for as long as the assignment and its aftercare last.
  • Invoices and accounting: seven years, as the law requires.
  • Web server logs: 30 days at most, unless we need them to investigate a security incident.
  • Statistics: 13 months.

Who processes data for us

A few suppliers process data on our behalf:

  • Scaleway: the servers that run the website, the content system and the statistics. Scaleway is a European company with servers in the EU; the statistics are in Prague (Czechia).
  • Brevo: sends the emails of the contact form. Brevo is a European company with servers in the EU.
  • Microsoft 365: our mailbox; receives contact messages and email to privacy@qantara.digital. Microsoft is an American company; transfers to the US are covered by the EU-US Data Privacy Framework.

We do not sell personal data. We only share it when the work needs it, when the law requires it or to protect our systems and clients.

Security

We protect data with encrypted connections, access only for those who need it and two-factor authentication where possible. No system is completely secure. That is why we keep as little as possible.

Your rights

You can ask us for access to, correction, deletion or transfer of your data, or to restrict its processing. You can also object, for example to the statistics. Email privacy@qantara.digital. We reply within one month.

If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens. We would like to hear from you first.

Changes

When the way we work changes, we update this policy. Last updated shows when that last happened. Dutch law applies to this policy.

Statistics