Privacy Policy

How we collect, use, and protect your personal data

At TiaTech, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

1. Data Controller

TiaTech is the data controller responsible for your personal data. You can contact us using the details provided in the Contact Information section.

  • Company: TiaTech
  • Email: info@tiatech.eu
  • Address: Helfrichstraat 55, 7311JB Apeldoorn

2. Information We Collect

We collect information that you provide directly to us, including: name, email address, subject, and message content when you submit our contact form. We also automatically collect certain information about your device and how you interact with our website.

  • Contact Form Data: Name, email address, subject, and message content
  • Technical Data: IP address, browser type, device information
  • Usage Data: Pages visited, time spent on pages, referring website

3. How We Use Your Information

We use the information we collect to respond to your inquiries, provide and improve our services, send you technical notices and support messages, and comply with legal obligations.

  • Respond to your inquiries and provide customer support
  • Send technical notices, updates, and security alerts
  • Improve our website and services
  • Detect and prevent fraud or abuse
  • Comply with legal obligations

4. Legal Basis for Processing

We process your personal data based on: your consent (contact form submissions), our legitimate interests (improving our services and responding to inquiries), and legal obligations.

  • Consent: When you submit the contact form
  • Legitimate Interests: Improving our services and website security
  • Legal Obligations: Compliance with applicable laws

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

  • Contact Form Data: Retained for up to 2 years or until inquiry is resolved
  • Technical Logs: Retained for up to 90 days
  • Legal Requirements: May be retained longer if required by law

6. Your Rights

Under GDPR, you have the right to access, rectify, erase, restrict processing, object to processing, and data portability. You also have the right to withdraw consent at any time and to lodge a complaint with a supervisory authority.

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate personal data
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten")
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in a structured format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time
  • Right to Lodge a Complaint: File a complaint with the Dutch Data Protection Authority

To exercise these rights, contact us at info@tiatech.eu

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal data, including HTTPS encryption, secure form processing, and access controls.

  • HTTPS encryption for all data transmission
  • Secure form processing through Netlify
  • Access controls and authentication
  • Regular security assessments and updates
  • Honeypot spam protection and input sanitization

8. Third-Party Services

We use Netlify for form processing and website hosting. Your data may be processed by these third-party service providers who are contractually obligated to protect your information.

  • Netlify: Website hosting and form processing (Data processor)
    • Location: United States (with EU data protection measures)
    • Privacy Policy: netlify.com/privacy
    • Data Processing Agreement: Netlify complies with GDPR and has Standard Contractual Clauses (SCCs) in place
  • hCaptcha: Spam protection for contact forms (with user consent)
    • Purpose: Protect against automated spam and malicious bots
    • Data collected: Browser fingerprint, interaction patterns, IP address, cookies
    • Location: United States (Intuition Machines, Inc.)
    • Privacy Policy: hcaptcha.com/privacy
    • Legal basis: Legitimate interest in protecting our services from abuse
    • Only activated if you consent via cookie banner
  • Google Tag Manager: Tag management system (with user consent)
    • Purpose: Manage analytics and marketing tags
    • Data collected: Depends on tags configured (analytics, remarketing, etc.)
    • Location: United States (Google LLC)
    • Only activated if you consent via cookie banner

9. International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA). When we transfer your personal data to countries outside the EEA, we ensure an adequate level of protection through:

  • Standard Contractual Clauses (SCCs): Approved by the European Commission
  • Adequacy Decisions: Where the European Commission has determined the country provides adequate protection
  • Additional Safeguards: Technical and organizational measures to protect your data

For transfers to the United States, we rely on Standard Contractual Clauses and ensure our processors implement appropriate technical and organizational measures, including encryption and access controls.

10. Automated Decision-Making and Profiling

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you. Any automated processing (such as spam detection via hCaptcha) is limited to technical operations and does not involve profiling based on personal characteristics.

11. Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately, and we will delete such information from our systems.

12. Data Breach Notification

In the unlikely event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

  • Notify the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) within 72 hours of becoming aware of the breach
  • Notify affected individuals without undue delay if the breach is likely to result in a high risk to their rights and freedoms
  • Provide clear information about the nature of the breach, potential consequences, and measures taken to address it
  • Document all data breaches, regardless of whether notification is required

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for operational reasons. We will:

  • Update the "Last updated" date at the bottom of this page
  • Notify you of material changes via email (if we have your email address) or a prominent notice on our website
  • Provide you with the opportunity to review the changes before they take effect

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at info@tiatech.eu.

Email: info@tiatech.eu
Address: Helfrichstraat 55, 7311JB Apeldoorn

Data Protection Authority:
If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):
autoriteitpersoonsgegevens.nl

Last updated: 2025-10-11